Newly Observed Ursnif Variant Employs Malicious TLS Callback Technique to Achieve Process Injection
Introduction
TLS (Thread Local Storage) callbacks are provided by the Windows
operating system to support additional initialization and termination
for per-thread data structures.
As previously
reported, malicious TLS callbacks, as an anti-analys… Continue reading Newly Observed Ursnif Variant Employs Malicious TLS Callback Technique
to Achieve Process Injection