MALFEX npm package 'imgdecode' hides shellcode loader in a Windows native addon
A still-available npm package tied to the MALFEX campaign loads a Windows DLL that downloads, decrypts and injects shellcode, SafeDep found.
#SafeDep
Cybersecurity news about “SafeDep”.