A newly documented process-injection technique places shellcode or DLL-loading logic inside ordinary startup parameters and is designed to avoid some API calls commonly tied to remote process injection.
A new Qilin ransomware campaign uses a cunning DLL injection scheme and rogue drivers to systematically disarm over 300 endpoint defenses before striking.