The threat actor may attempt to execute malicious code by side-loading a malicious DLL using a legitimate application.
Tag: T1218.011
Game of Emperor
The threat actor has gained initial access and is utilizing various defense evasion techniques to avoid detection while establishing persistence and maintaining control.
Volt Typhoon against energy etc.
Attackers may be using Mshta.exe or Rundll32.exe to execute malicious code.