Security News > 2018 > July > PROPagate Code Injection Seen in the Wild

PROPagate Code Injection Seen in the Wild
2018-07-09 11:13

Last year, researchers wrote about a new Windows code injection technique called PROPagate. Last week, it was first seen in malware: This technique abuses the SetWindowsSubclass function -- a process used to install or update subclass windows running on the system -- and can be used to modify the properties of windows running in the same session. This can be...


News URL

https://www.schneier.com/blog/archives/2018/07/propagate_code_.html