[MMPC]Dismantling a fileless campaign: Microsoft Defender ATP’s Antivirus exposes Astaroth attack

[igor51]

Dismantling a fileless campaign: Microsoft Defender ATP’s Antivirus exposes Astaroth attack

Advanced technologies in Microsoft Defender ATP's Antivirus exposed and defeated a widespread fileless campaign that completely “lived off the land” throughout a complex attack chain that run the info-stealing backdoor Astaroth directly in memory

The post Dismantling a fileless campaign: Microsoft Defender ATP’s Antivirus exposes Astaroth attack appeared first on Microsoft Security.

Source: Dismantling a fileless campaign: Microsoft Defender ATP’s Antivirus exposes Astaroth attack