coldbraid

Process Injection T1055

Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to…

Tactics
Stealth, Privilege Escalation
Actors using it
30
Sub-techniques
10

Ransomware groups reported using it

qilinsafepayrhysidapearclop

Threat actors