Attack via xattr: how malware hides in Linux
Detecting attempts to hide payloads in extended file attributes
Alexander Golovin
NetNTLM hashes leak through Snipping Tool
How to prevent exploitation of a vulnerability in a popular image editing tool
Invisible attacks with bind mount
A technique much simpler than rootkit can make a malicious process invisible
Disabling Windows Defender via symlink
Built-in antivirus could be switched off without any third-party software