Quasar RAT, an open-source remote access trojan, is leveraging DLL side-loading to infiltrate Windows hosts and steal data. The attack begins with an ISO image file, which contains malicious code that is hidden through DLL side-loading. A ‘FileDownloader.exe’ file is injected into the Windows Assembly Registration Tool, which triggers the trojan to establish connections with a remote server and send system information. The likely dissemination method is phishing emails.
CISA Releases Security Advisory on 13 Industrial Control System Threats
The Cybersecurity and Infrastructure Security Agency (CISA) issued thirteen advisories to address vulnerabilities in industrial control systems (ICS), mainly in various Siemens systems and products
