Tag: legacy driver exploitation

1 Attack Reports | 0 Vulnerabilities

Attack reports

Legacy Driver Exploitation Through Bypassing Certificate Verification

A new security threat using the Legacy Driver Exploitation technique has been identified, focusing on remote system control via Gh0stRAT malware. The attack distributes malware through phishing and messaging apps, utilizing DLL side-loading for additional payloads. A modified TrueSight.sys driver b…
gh0strat
dll side-loading
avkiller
2025-03-18
padding manipulation
legacy driver exploitation
CVE-2013-3900
certificate verification
driver vulnerability
truesight.sys
Published: March 18, 2025
Downloadable IOCs: 3
Click here to see more Attack Reports