New Malware Technique Could Exploit Windows UI Framework to Evade EDR Tools
Briefly

from The Hacker News2 months ago
To exploit this technique, a user must be convinced to run a program that uses UI Automation, leading to stealthy command execution and sensitive data harvesting.
The Hacker Newshttps://thehackernews.com/2024/12/new-malware-technique-could-exploit.html
Local attackers could exploit this blind spot to execute commands and access messaging applications like Slack and WhatsApp, potentially manipulating UI elements over a network.
The Hacker Newshttps://thehackernews.com/2024/12/new-malware-technique-could-exploit.html
Assistive technologies must run with special privileges and be trusted by the system, allowing them higher access to protected UI elements and other processes.
The Hacker Newshttps://thehackernews.com/2024/12/new-malware-technique-could-exploit.html
The ability to manipulate UI elements using the Component Object Model with UI Automation provides opportunities for attackers to interact stealthily within trusted applications.
The Hacker Newshttps://thehackernews.com/2024/12/new-malware-technique-could-exploit.html
Read at The Hacker News
#cybersecurity #ui-automation #malware #endpoint-security #microsoft-windows
[
|
]