Tag: EDR
Hackers hijack Microsoft passkey enrollment in voice phishing blitz
The Muddled Libra threat actor uses voice phishing and fake Microsoft Entra passkey enrollment portals to gain persistent access to…
Process parameter poisoning sidesteps EDR defenses with novel injection technique
A proof of concept places malicious code in Windows process startup data rather than writing it directly into memory, bypassing…
GhostTree Technique Traps EDR Scanners in Infinite Directory Loops
GhostTree exploits NTFS junctions to create recursive directory loops that trap EDR scanners in infinite traversal paths, leaving malicious files…