As cited
Copy frozen at (site build).
threat intel
Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation
Researchers analyzed a cybercrime campaign deploying Vidar Stealer through a combination of novel evasion techniques, including a Go-compiled loader framework and DLL sideloading via a spoofed MpClient.dll. The attackers leveraged code signing abuse to enhance legitimacy and bypass security controls.
Why it matters: Organizations need to monitor for Vidar Stealer campaigns using these evasion tactics, as the Go loader and DLL sideloading techniques represent an evolving threat that may evade traditional endpoint detection methods.
- Source published
- First seen by Cybersecurity Tracker