PoolParty Injection Techniques Circumvent EDR Solutions

Enthusiasts presented 8 new malware injection ways, based on Windows ThreadPool system

A set of process injection techniques, named PoolParty, was presented at the Black Hat Europe 2023 conference. A set of 8 tricks allows to force running any malicious code, and circumvents protection of top-notched EDR solutions. PoolParty Process Injection Exploits Windows Mechanisms The initial presentation of the techniques, along with further analysis, reveals a chain… Continue reading PoolParty Injection Techniques Circumvent EDR Solutions

How Can Companies Be Secure Against Cyberattacks?

Companies need to pay attention to the rise in data breaches and the risks cyberattacks.

Organizations face an alarming reality in the digital world: data breaches and cyberattacks are becoming more frequent. Cybercriminals find more opportunities to exploit vulnerabilities as reliance on technology grows, and personal information is collected, stored. One of the primary methods that bad actors use to scam companies is social engineering attacks. Let’s look at crucial… Continue reading How Can Companies Be Secure Against Cyberattacks?

RDP Honeypot Was Attacked 3.5 Million Times

A honeypot designed for RDP was targeted with 3.5 million attacks.

With increased remote work, IT teams use remote access tools to manage company devices and ensure smooth operations. Remote desktop connections are highly attractive to hackers, with an average of over 37,000 attempts from multiple IP addresses daily. These attacks are typically automated, but once the hackers gain access credentials, they manually search for critical… Continue reading RDP Honeypot Was Attacked 3.5 Million Times