Tag: entry-point-patching

1 Attack Reports | 0 Vulnerabilities

Attack reports

SLOW#TEMPEST Cobalt Strike Loader

An ISO image containing a malicious Cobalt Strike loader was discovered, targeting Chinese-speaking users. The infection chain involves a deceptive LNK file, which executes a legitimate Alibaba executable to sideload a malicious DLL. The loader implements anti-analysis techniques, decrypts an embed…
cobalt strike
anti-analysis
dll-sideloading
2025-08-07
beacon
entry-point-patching
chinese-targets
cobalt-strike
iso-image
Published: August 7, 2025
Downloadable IOCs: 9
Click here to see more Attack Reports