Chinese Hackers Deploy Stealthy TCESB Malware, Exploiting ESET Security Flaw in Active Attacks

Chinese threat actor ToddyCat is exploiting a vulnerability (CVE-2024-11859) in ESET Command Line Scanner to deploy TCESB, a sophisticated malware that bypasses security tools. The attack uses DLL Search Order Hijacking with a malicious "version.dll" file. TCESB, a modified version of EDRS...