TACTIC: DEFENSE EVASION
Process Injection (T1055): real cases
MITRE Definition ↗ Adversaries inject malicious code into processes to evade process-based defenses and elevate privileges.
Key Facts
Technique ID
T1055
Defense Evasion
Mapped Cases
1
Primary sources
Related Laws
0
Criminal statutes
- ATT&CK Technique Identifier: T1055.
- Tactical Phase: Defense Evasion.
- Substantiated in 1 primary court prosecution cases.
- Every associated case includes verbatim evidentiary excerpts from indictments or sworn affidavits.
Verified Evidentiary Case Records
U.S. v. Yakubets & Turashev (Evil Corp / Dridex Banking Malware)
fugitive 2019-11-14
Primary Source Evidence Excerpt: Indictment ¶ 23, Page 13
"Dridex injected dynamic link library code into running Internet Explorer and Chrome browser processes to intercept HTTPS traffic."
U.S. District Court for the Western District of Pennsylvania
View full case dossier →