← Back to Labs
← Volver a Labs
Medium
APT, LOLBin
Defense Evasion, Execution
EDR, Sysmon, Windows

Unveiling Earth Alux’s VARGEIT Backdoor: Leveraging Legitimate Debuggers for Cyber Espionage

Recently, the use of legitimate Windows debugging tool to load malicious code into memory has been observed. The APT Earth Alux uses it to load its VARGEIT backdoor, which is an advanced circumvention technique to establish an initial foothold on the target system.

labs correlati

Contacts

Get in touch with us

Contact Us
chevron-right