Brief.

Tag

dll-sideloading

1 entry.

  1. The 8-stage ClickFix chain, decoded for defenders

    Huntress caught a ChatGPT Custom GPT pushing a RAT through a Canon-signed DLL sideload. Here is each stage as an example a blue team can hunt for, from the ClickFix paste to the final payload.