3 ms·
Malware that exploits a brother industries exe, which is vulnerable to loading a malware DLL named the same as a legit one. Possibly to do with printers ? Not
by muststopmyths 3y ago
Malware that exploits a brother industries exe, which is vulnerable to loading a malware DLL named the same as a legit one.
Possibly to do with printers ?
Not very clear if the exe has been patched since, as the article talks about a exe with an expired signature
- barryrandall 3y agoAttackers use vulnerabilities in MS-signed 3rd party drivers as malware loaders. Most attackers use drivers with known vulnerabilities, but every now and then they come up with something new. More details and mitigation instructions can be found here: https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/design/microsoft-recommended-driver-block-rules https://learn.microsoft.com/en-us/windows/security/applicati...