Trusted Design

Shadow Force Uses DLL Hijacking, Targets South Korean Company

概要

What sort of interest would a businessman have in a news agency? That was the question that arose from our recent investigation on an attack that appears to target a media agency in South Korea. Shadow Force is a new backdoor that replaces a DLL called by a particular Windows service. Once that backdoor is open, the attacker can use one or more tools to open up further holes or cause damage.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Duuzer back door Trojan targets South Korea (score: 0.58)
• Korean Central News Agency serving malware (score: 0.56)
• Chinese Actors attacks on US Government and EU Media (score: 0.54)
• Duuzer back door Trojan (score: 0.53)
• Duuzer back door Trojan (score: 0.53)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る