WhatsApp-Delivered Malware Injects Into Windows Task Scheduler to Run as SYSTEM

A WhatsApp-delivered financial-document lure is being used to deploy a sophisticated Windows malware chain that injects code into the Task Scheduler service and executes subsequent payloads with LocalSystem privileges. The executable acts as an NRV2E-compressed wrapper that reconstructs its malicious loader entirely in memory, limiting obvious artifacts on disk and obscuring imports, strings, and control-flow […]

The post WhatsApp-Delivered Malware Injects Into Windows Task Scheduler to Run as SYSTEM appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
posted by pod_feeder

WhatsApp-Delivered Malware Injects Into Windows Task Scheduler to Run as SYSTEM

A WhatsApp-delivered financial-document lure is being used to deploy a sophisticated Windows malware chain that injects code into the Task Scheduler service.

^{Mayura Kathir (GBHackers Security | #1 Globally Trusted Cyber Security News Platform)}