DLL Hijacking/Proxying, replaces chrome_elf.dll with yours, and when chrome starts, .dlll loads and runs your payload.
How does it work?
Chrome.exe starts and loads our fake chrome_elf.dll
DLL executes malicious code when Chrome calls certain functions.
Payload downloads and executes a file from a remote server
Chrome continues to work without any visible problems to the user
download:
How does it work?
Chrome.exe starts and loads our fake chrome_elf.dll
DLL executes malicious code when Chrome calls certain functions.
Payload downloads and executes a file from a remote server
Chrome continues to work without any visible problems to the user
download: