CiberLATAMbywhalemate

#DLL side-loading

This tag collects reporting on a technique where threat actors abuse legitimate libraries to load unauthorized code. Readers will find coverage of campaigns, persistence and evasion methods, plus guidance on detection and response in corporate environments across Latin America.

Casbaneiro: Two Campaigns and an Active C2

Unit 42 tracked two Casbaneiro activity lines, including an abused remote access tool, Delphi side-loading and a malicious Chromium extension.

Nov 2, 2026 · 41 min