A sophisticated Iran-nexus threat actor tracked as Cavern Manticore has deployed a new modular command-and-control framework to infiltrate Israeli IT and government networks. The attackers abuse trusted remote management software to trigger a DLL sideloading chain that bypasses conventional security defenses. The targeted attack begins when hackers exploit the SysAid software update feature to drop […]
The post Hackers Use uxtheme.dll Sideloading to Launch Cavern Agent on Compromised Systems appeared first on Cyber Security News.