Lotus Blossom's New Attack Campaign: Domain Fronting and Abusing Centralized Domain Management (Part 3)

Detailed analysis of malware samples used in the campaign1. Malware 1 (SignLoader)1.1. Techniques being used• SignLoader malware exploits the DLL sideloading technique to execute the malicious payload. Using a legitimate binary called EPHost.Integrity.exe which is a program module created by Bitdefender, the attackers could execute the