SmokeLoader's Plugins

Bitsight dissects SmokeLoader’s plugins received by an infected computer from the botnet “0020”. We explore their inner workings, capabilities, and threat vectors.

Article Link: SmokeLoader's Plugins | Bitsight