
← Back to Labs
← Volver a Labs
Medium
APT, LOLBin
Defense Evasion, Execution
EDR, Sysmon, Windows
Unveiling Earth Alux’s VARGEIT Backdoor: Leveraging Legitimate Debuggers for Cyber Espionage
Recently, the use of legitimate Windows debugging tool to load malicious code into memory has been observed. The APT Earth Alux uses it to load its VARGEIT backdoor, which is an advanced circumvention technique to establish an initial foothold on the target system.



