BRONZE SANDCASTLE uses Sandboxie DLL sideloading to run a modified Meterpreter backdoor in memory against targets in Asia and Africa. Related Posts: Skynet LLMjacking Agent Hijacks Exposed AI Models to Hack Servers and Mine Crypto INC Ransomware Affiliates Expose Seven Servers Holding Phantom AI Framework and 46 Encryptors SafePay Ransomware Hits 600 Victims as FBI, CISA and Allies Issue Joint Warning The post BRONZE SANDCASTLE Uses Sandboxie DLL Sideloading to Deploy Modified Meterpreter Bac

Sophos found BRONZE SANDCASTLE abusing legitimate Windows apps to load encrypted backdoors, collect system information and steal Active…

The exploitation of vulnerabilities targeting remote access technologies to gain initial access is continuing relentlessly also during 2025, with initial access brokers, and in general opportunistic and targeted threat actors, quite active in leveraging software flaws to break into organizations.