Tag: minhook

1 Attack Reports | 0 Vulnerabilities

Attack reports

Finding Minhook in a sideloading attack – and Sweden too

A threat actor campaign targeting multiple locations was observed in late 2023 and early 2024. Initially focused on the Far East, it later shifted to Sweden. The attacks used DLL sideloading techniques, employing the Minhook library to detour Windows API calls. The clean loader was obtained from in…
cobalt strike
dll sideloading
api hooking
2025-05-01
minhook
digital signature
Published: May 1, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports