criticaltestEmerging Threat
FoggyWeb Backdoor DLL Loading
Detects DLL hijacking technique used by NOBELIUM in their FoggyWeb backdoor. Which loads a malicious version of the expected "version.dll" dll
windowsimage_load
2022-12-09
FoggyWeb is tracked here as a malware family or toolset with 1 Sigma detection spanning 2021. Coverage centers on windows / image_load.
Detects DLL hijacking technique used by NOBELIUM in their FoggyWeb backdoor. Which loads a malicious version of the expected "version.dll" dll