Hackers Abuse Windows Error Reporting (WER) Service in Fileless Malware Attack

From gbhackers.com

Fileless Malware Attack

Security researchers uncovered a new attack dubbed Kraken that uses injected its payload into the Windows Error Reporting service to evade detection.

The WerFault.exe is a service that shows some error happened with the operating system, Windows features, or applications, victims would assume some error happen, but attackers stealthy execute malware using the process.

Read more…