[New post] SockDetour Backdoor

PravinKarthik posted: " A new tool called SockDetour has been discovered that acts as a backup backdoor if the original one is removed. Written in the 64-bit PE file format, stands out and is challenging to detect since it runs filelessly and socketlessly on hacked Windows " New post on TheCyberThrone SockDetour Backdoor by PravinKarthik A new tool called SockDetour has been discovered that acts as a backup backdoor if the original one is removed. Written in the 64-bit PE file format, stands out and is challenging to detect since it runs filelessly and socketlessly on hacked Windows servers. One of the C2 infrastructures that the threat actor used for […] Read more of this post PravinKarthik | February 25, 2022 at 7:03 pm | Tags: Backdoor, Security Threat, SockDetour, TIltedTemple | Categories: Security | URL: https://wp.me/pbHFj3-23j Comment    See all comments Unsubscribe to no longer receive posts from TheCyberThrone. Change your email settings at Manage Subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://thecyberthrone.in/2022/02/25/sockdetour-backdoor/