A newly documented Windows process-injection technique, dubbed Process Parameter Poisoning (P3P^3P3), shows how attackers can stage shellcode or DLL-loading code in a process’s normal startup parameters. The approach is designed to avoid several API calls that endpoint detection and response EDREDREDR products commonly associate with remote process injection. The technique is implemented in the P3P^3P3-Shellcode […]
The post Windows Process Parameter Poisoning Enables Low-Visibility Shellcode and DLL Injection appeared first on Cyber Security News.