Bronze Sandcastle abuses Sandboxie sideloading for backdoors
Sophos details a China-aligned cluster, Bronze Sandcastle, that sideloads a malicious sbiedll.dll via legitimate Sandboxie binaries to run in-memory Meterpreter and steal ntds.dit.
Sophos details a China-aligned cluster, Bronze Sandcastle, that sideloads a malicious sbiedll.dll via legitimate Sandboxie binaries to run in-memory Meterpreter and steal ntds.dit.