OTX Threat: Camera Management Software Compromise Leads to Malware Deployment
AI Summary
Attackers compromised camera management software (CMS.exe) to gain initial access to multiple organizational environments. Following compromise, adversaries deployed rs.win32.exe into user AppData directories and leveraged DLL sideloading by placing the legitimate Windows binary WpcMon.exe alongside malicious DLLs (IPHLPAPI.DLL and samcli.dll) in non-standard locations. These modified DLLs, based
Discussion
Sign in to join the discussion.
Loading comments…