Feedly:TrendLabs Security Intelligence Blog. Shadow Force Uses DLL Hijacking, Targets South Korean Company

from TrendLabs Security Intelligence Blog

What sort of interest would a businessman have in a news agency? That was the question that arose from our recent investigation on an attack that appears to target a media agency in South Korea. Shadow Force is a new backdoor that replaces a DLL called by a particular Windows service.  Once that backdoor is open, the attacker […]