JadeProx and TriBack Loader: new chain targets government and healthcare via DLL sideloading

Colleagues, I’d like to draw your attention to a cybersecurity update.

A campaign linked to JadeProx has been targeting government, healthcare and education sectors across Asia and Latin America.

Key points:
- initial access relied on phishing, web shells and DLL sideloading;
- the chain included a new loader, TriBack Loader;
- the attacks also exploited long-known, critical-rated vulnerabilities.

Why it matters: even older CVEs and common techniques remain effective where public-facing services and weak patch management persist.

In your view, which is more dangerous today — phishing or exploitation of legacy vulnerabilities?

#cybersecurity #ThreatIntel #Malware #Vulnerability