Friday 26 June 2026 15:21:29 GMT+02:00
Netcrook
#Windows DPAPI
Windows Password History Gets a New Forensic Risk Map
An updated DPAPISnoop build draws attention to a narrow but important attack surface: Windows CREDHIST files can yield offline-crackable hashes that may reveal fragments of password history.
Inside the Memory: RemotePE Shows How Lazarus Keeps Malware Off the Disk
A loader chain built around Windows DPAPI and in-memory execution points to a quieter, harder-to-hunt style of intrusion against finance and crypto targets.