#sideloading

2026-01-29

CoolClient Updates to Deploy Browser Login Data Stealer

The CoolClient malware is distributed through DLL sideloading, leveraging legitimate signed executables to load malicious DLLs and evade security detection. This technique allows the attackers to establish persistence while appearing as trusted software activity on the compromised system.

Pulse ID: 697bebfcd4770071ed11a5df
Pulse Link: otx.alienvault.com/pulse/697be
Pulse Author: cryptocti
Created: 2026-01-29 23:23:40

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #CyberSecurity #InfoSec #Malware #OTX #OpenThreatExchange #Rust #SideLoading #bot #cryptocti

Christian Nollvnzn@mas.to
2026-01-25

Google confirms 'high-friction' sideloading flow is coming to Android (androidauthority.com)

androidauthority.com/google-si

#Google #Android #sideloading

2026-01-22

Модели личности на LLM. Интервью с Турчиным

После выхода статьи «Сайдлоадинг и оффлоадинг: cоздание цифровых моделей личности с помощью сверхбольших промптов для LLM» у многих (в том числе и у меня) появились вопросы к автору идеи Алексею Турчину. Неожиданно я узнал, что мы живём в одном районе, и Алексей согласился дать интервью и ответить на вопросы.

habr.com/ru/companies/ruvds/ar

#Модель_личности_на_основе_LLM #sideloading #offloading #ruvds_статьи

Marcel SIneM(S)USsimsus@social.tchncs.de
2026-01-22
:awesome:🐦‍🔥nemo™🐦‍⬛ 🇺🇦🍉nemo@mas.to
2026-01-20

Android macht Sideloading unverifizierter Apps komplizierter: Künftig sind zusätzliche Verifizierungen und Warnungen nötig, um Nutzer besser vor Malware und Social-Engineering-Angriffen zu schützen 🔒📱 Mehr Details im Artikel: heise.de/news/Android-Sideload #Android #Sideloading #Security

2026-01-19

December 2025 Infostealer Trend Report

This analysis examines Infostealer malware trends during December 2025, focusing on distribution methods, volume, and disguising techniques. Key findings include the prevalence of ACRStealer, LummaC2, and Stealc Infostealers, with malware primarily distributed through SEO poisoning and compromised legitimate websites. The report highlights two significant trends: the abuse of Python scripts for malware distribution and the emergence of cryptocurrency-stealing malware using Tor. Distribution methods evolved from direct blog posts to leveraging legitimate websites and forums. The analysis also notes a shift in malware execution methods, with 65.8% distributed as EXE files and 34.2% using DLL Sideloading techniques. The report emphasizes the importance of vigilance against these evolving threats and provides detailed insights into the malware's behavior and infrastructure.

Pulse ID: 696aa09639d29c5fccdf25d2
Pulse Link: otx.alienvault.com/pulse/696aa
Pulse Author: AlienVault
Created: 2026-01-16 20:33:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #InfoStealer #LummaC2 #Mac #Malware #OTX #OpenThreatExchange #Python #SEOPoisoning #SideLoading #Stealc #bot #cryptocurrency #AlienVault

2026-01-19

Targeted espionage leveraging geopolitical themes

A targeted malware campaign against U.S. government entities has been observed, utilizing a politically themed ZIP archive containing a loader executable and a malicious DLL. The DLL functions as a backdoor named LOTUSLITE, communicating with a hard-coded command-and-control server. The campaign demonstrates minimal technical sophistication but shows deliberate victim selection and use of geopolitical lures. Attribution analysis suggests moderate-confidence overlap with Mustang Panda tradecraft, including delivery style, loader-DLL separation, and infrastructure usage. The backdoor supports basic remote tasking and data exfiltration, indicating an espionage-focused capability. This activity reflects a trend of targeted spear phishing using geopolitical themes and reliable execution techniques like DLL sideloading.

Pulse ID: 6968d7976784ef21a6276d75
Pulse Link: otx.alienvault.com/pulse/6968d
Pulse Author: AlienVault
Created: 2026-01-15 12:03:35

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #CyberSecurity #Espionage #Government #InfoSec #Malware #Nim #OTX #OpenThreatExchange #Phishing #RAT #SideLoading #SpearPhishing #ZIP #bot #AlienVault

2026-01-19

Power users, sideloading. All that says is, normal or day to day users will not be allowed to sideload, install from other sources. Needing internet access to verify. Bunch of crap. If you want to rule, just plain open state it, and ask everyone to bow down to you. That will be more fitting to your nonsense of silently making things worse for users. #boycottgoogle #fuckyougoogle #android #sideloading #mydevicemywish #foogle #google

2026-01-16

Сайдлоадинг и оффлоадинг: cоздание цифровых копий личности с помощью сверхбольших промптов для LLM

Недавно я был на интересной лекции по созданию моделей личности с помощью сверхбольших промптов для LLM в библиотеке им. Фёдорова. Концепции, прозвучавшие на ней, оказались настолько интересными, что я решил познакомить с ними Хабр.

habr.com/ru/companies/ruvds/ar

#sideloading #offloading #Турчин #ruvds_статьи

2026-01-16

Сайдлоадинг и оффлоадинг: cоздание цифровых копий личности с помощью сверхбольших промптов для LLM

Недавно я был на интересной лекции по созданию моделей личности с помощью сверхбольших промптов для LLM в библиотеке им. Фёдорова. Концепции, прозвучавшие на ней, оказались настолько интересными, что я решил познакомить с ними Хабр.

habr.com/ru/companies/ruvds/ar

#sideloading #offloading #Турчин #ruvds_статьи

2026-01-15

Hiding in Plain Sight: Deconstructing the Multi-Actor DLL Sideloading Campaign abusing ahost.exe

The Trellix Advanced Research Center has uncovered an active malware campaign that exploits a DLL sideloading vulnerability within the legitimate ahost.exe utility

Pulse ID: 6968b09048bbcab9b95b0ee7
Pulse Link: otx.alienvault.com/pulse/6968b
Pulse Author: Tr1sa111
Created: 2026-01-15 09:17:04

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #Malware #OTX #OpenThreatExchange #SideLoading #Trellix #Vulnerability #bot #Tr1sa111

2026-01-01

Firmiamo la petizione per chiedere a google di non bloccare il sideloading delle app! Tentar non nuoce!
c.org/qZ7KxSP6Jp

keepandroidopen.org/

#google #sideloading #foss #opensource #apk #keepandroidopen

2025-12-29

PlumeImpactor è la nuova applicazione open source che porta il sideloading di app iOS e tvOS anche su Linux, con un’interfaccia moderna, supporto multipiattaforma e un workflow semplice e potente. #Linux #iOS #Sideloading #OpenSource

linuxeasy.org/plumeimpactor-il

Client Info

Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst