Cybercriminals Use Eclipse Jarsigner to Deploy XLoader Malware via ZIP Archives
The DLL side-loading approach has been used by a malware campaign that uses a legal program connected to the Eclipse Foundation to distribute the XLoader malware.
According to the AhnLab Security Intelligence Center (ASEC), the legitimate application utilized in the assault, jarsigner, is a file generated after the installation of the Eclipse Foundation's IDE package. It is a JAR (Java Archive) file signing utility.
According to the South Korean cybersecurity company, the malware is sent as a compressed ZIP file that contains both the genuine executable and the DLLs that must be sideloaded in order for the malware to run read more about Cybercriminals Use Eclipse Jarsigner to Deploy XLoader Malware via ZIP Archives.
Get up to date on the latest cybersecurity news and enhance your...