← Back to Labs
← Volver a Labs
High
APT, Campaign, Malware
Defense Evasion
EDR, Sysmon, Windows
The Dark Side of Windows Sandbox: A New Frontier for Stealthy Threats
MirrorFace, a Chinese advanced persistent threat (APT) under the APT10 umbrella, was observed to conceal malicious activities by exploiting the Windows Sandbox during a targeted attack on a European institution. Although designed to run risky applications in an isolated environment, attackers have used this tool to distribute malicious payloads, reducing the risk of detection and delaying countermeasures.
