HakaiMalware
Last reported 21 months ago, by Elastic Security Labs1 report
ATT&CK techniques
2 techniques · each with the sentence it comes from- T1055Process Injection
“With process injection becoming a prevalent technique for embedding code into legitimate processes, defenders introduced API hooking to monitor and block such activity.”
- T1055.012Process Hollowing
“…ons need more advanced EDRs, like Elastic Defend, that offer visibility into injection methods, memory manipulation, system calls, process hollowing, and other evasive tactics.”
What the reports say
1 report, newest first · the exact sentence from each-
Detonating Beacons to Illuminate Detection Gaps“Other more recent examples include the rust-based Coffee loader by Hakai Security and the GoLang-based implementation Goffloader by Praetorian.”
Thanks — we review every report.