Rundll32: The Infamous Proxy for Executing Malicious Code

Take a deeper dive into an often abused Microsoft-signed tool, the infamous rundll32.exe, which allows adversaries to execute malicious code during their offensive operations through a technique which we explain in detail

Threat Group Assessment: Turla (aka Pensive Ursa)

AgentTesla Information-Stealing Malware Delivered in Cyber-Attacks on Ukrainian Government Entities - SOC Prime

Zloader Installs Remote Access Backdoors and Delivers Cobalt Strike – Sophos News

3 Malware Loaders You Can't (Shouldn't) Ignore - ReliaQuest

Rundll32: The Infamous Proxy for Executing Malicious Code

Microsoft warns of Dexphot miner, an interesting polymorphic threat

Zloader Installs Remote Access Backdoors and Delivers Cobalt Strike – Sophos News

Windows Exploitation: rundll32.exe - Hacking Articles

PcShare Backdoor Attacks Targeting Windows Users with FakeNarrator Malware

Emulating the Infamous Modular Banking Trojan BokBot - AttackIQ

RunDLL32.exe Obscurity

Rundll32: The Infamous Proxy for Executing Malicious Code

The Windows Process Journey — rundll32.exe (Windows Host Process), by Shlomi Boutnaru, Ph.D.

Rundll32: The Infamous Proxy for Executing Malicious Code