{"id":82203,"date":"2025-11-05T12:54:40","date_gmt":"2025-11-05T10:54:40","guid":{"rendered":"https:\/\/gulftech-news.com\/en\/?p=82203"},"modified":"2025-11-05T12:54:45","modified_gmt":"2025-11-05T10:54:45","slug":"kaspersky-dll-hijacking-attacks-have-doubled-since-2023","status":"publish","type":"post","link":"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/","title":{"rendered":"Kaspersky: DLL hijacking attacks have doubled since 2023"},"content":{"rendered":"\n<p><strong>Dynamic link library (DLL) hijacking is a common technique in which attackers replace a library loaded by a legitimate process with a malicious one. <\/strong><\/p>\n\n\n\n<p><strong>It is used by creators of mass-impact malware, like stealers and banking Trojans, as well as by APT (advanced persistent threat) and cybercrime groups behind targeted attacks. Kaspersky reports that DLL hijacking attacks have doubled in the past two years.<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"777\" height=\"268\" src=\"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/11\/image.png?v=1762339968\" alt=\"\" class=\"wp-image-82205\" srcset=\"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/11\/image.png?v=1762339968 777w, https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/11\/image-300x103.png?v=1762339968 300w, https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/11\/image-768x265.png?v=1762339968 768w\" sizes=\"auto, (max-width: 777px) 100vw, 777px\" \/><\/figure>\n\n\n\n<p><em>The number of <\/em><em>DLL hijacking attacks and their variations in 2023-2025.<br>Source: Kaspersky Security Network<\/em><em><\/em><\/p>\n\n\n\n<p>Kaspersky has observed this technique and its variations, like DLL sideloading, in targeted attacks on organizations in <a href=\"https:\/\/securelist.com\/cobalt-strike-attacks-using-quora-github-social-media\/117085\/\">Russia<\/a>, <a href=\"https:\/\/securelist.com\/apt41-in-africa\/116986\/\">Africa<\/a>, <a href=\"https:\/\/securelist.com\/operation-synchole-watering-hole-attacks-by-lazarus\/116326\/\">South Korea<\/a>, as well as other countries and regions. To further enhance its protection capabilities against this threat, Kaspersky SIEM has introduced a specialized AI-based subsystem that continuously analyzes information about all loaded libraries.<\/p>\n\n\n\n<p>The new feature has already proven effective, helping to detect an attack by the APT group ToddyCat. It enabled the threat to be identified and blocked at an early stage, preventing any impact on the targeted organizations. The model also uncovered attempts to infect potential victims with an infostealer and a malicious loader.<\/p>\n\n\n\n<p><em>\u201cWe are seeing DLL hijacking attacks become more common, where a trusted program is tricked into loading a fake library instead of the real one. This gives attackers a way to secretly run their malicious code. This technique is difficult to detect, and this is where AI can help. <\/em><\/p>\n\n\n\n<p><em>Using advanced protection techniques empowered with AI is now essential to staying ahead of these evolving threats and keeping critical systems safe,\u201d <\/em>says Anna Pidzhakova, Data Scientist at Kaspersky\u2019s AI Research Center.<\/p>\n\n\n\n<p>Securelist has published two related articles: <a href=\"https:\/\/securelist.com\/building-ml-model-to-detect-dll-hijacking\/117565\/\">the first<\/a> explains how a machine-learning model was developed to detect DLL hijacking attacks, while <a href=\"https:\/\/securelist.com\/detecting-dll-hijacking-with-machine-learning-in-kaspersky-siem\/117567\/\">the second<\/a> describes how this model was integrated into the Kaspersky SIEM platform. <a><\/a>The updated Kaspersky <a href=\"https:\/\/www.kaspersky.com\/enterprise-security\/unified-monitoring-and-analysis-platform\">SIEM<\/a> now features AI functionality for detecting signs of DLL hijacking attacks, improving detection efficiency.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>&nbsp;<\/strong><\/h4>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Dynamic link library (DLL) hijacking is a common technique in which attackers replace a library loaded by a legitimate process with a malicious one. It is used by creators of mass-impact malware, like stealers and banking Trojans, as well as by APT (advanced persistent threat) and cybercrime groups behind targeted attacks. Kaspersky reports that DLL &hellip;<\/p>\n","protected":false},"author":2,"featured_media":82206,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[644],"tags":[4210,1088],"class_list":["post-82203","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-communications-technology","tag-dll","tag-kaspersky-4"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Kaspersky: DLL hijacking attacks have doubled since 2023 - Gulf Tech News<\/title>\n<meta name=\"description\" content=\"Kaspersky: DLL hijacking attacks have doubled since 2023\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Kaspersky: DLL hijacking attacks have doubled since 2023 - Gulf Tech News\" \/>\n<meta property=\"og:description\" content=\"Kaspersky: DLL hijacking attacks have doubled since 2023\" \/>\n<meta property=\"og:url\" content=\"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/\" \/>\n<meta property=\"og:site_name\" content=\"Gulf Tech News\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-05T10:54:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-11-05T10:54:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/11\/Kaspersky-New-Logo.png?v=1762340068\" \/>\n\t<meta property=\"og:image:width\" content=\"780\" \/>\n\t<meta property=\"og:image:height\" content=\"405\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"bessan helmi\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"bessan helmi\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/\",\"url\":\"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/\",\"name\":\"Kaspersky: DLL hijacking attacks have doubled since 2023 - Gulf Tech News\",\"isPartOf\":{\"@id\":\"https:\/\/gulftech-news.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/11\/Kaspersky-New-Logo.png?v=1762340068\",\"datePublished\":\"2025-11-05T10:54:40+00:00\",\"dateModified\":\"2025-11-05T10:54:45+00:00\",\"author\":{\"@id\":\"https:\/\/gulftech-news.com\/en\/#\/schema\/person\/c033626e357b2f7e127eac0570ddc05c\"},\"description\":\"Kaspersky: DLL hijacking attacks have doubled since 2023\",\"breadcrumb\":{\"@id\":\"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/#primaryimage\",\"url\":\"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/11\/Kaspersky-New-Logo.png?v=1762340068\",\"contentUrl\":\"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/11\/Kaspersky-New-Logo.png?v=1762340068\",\"width\":780,\"height\":405,\"caption\":\"Kaspersky: DLL hijacking attacks have doubled since 2023\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/gulftech-news.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Kaspersky: DLL hijacking attacks have doubled since 2023\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/gulftech-news.com\/en\/#website\",\"url\":\"https:\/\/gulftech-news.com\/en\/\",\"name\":\"Gulf Tech News\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/gulftech-news.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/gulftech-news.com\/en\/#\/schema\/person\/c033626e357b2f7e127eac0570ddc05c\",\"name\":\"bessan helmi\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/gulftech-news.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/bb1e09a6f094e0fa605073926f8ad9eb228a8b0aacd381fda782c562612428cf?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/bb1e09a6f094e0fa605073926f8ad9eb228a8b0aacd381fda782c562612428cf?s=96&d=mm&r=g\",\"caption\":\"bessan helmi\"},\"url\":\"https:\/\/gulftech-news.com\/en\/author\/bessan-helmi\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Kaspersky: DLL hijacking attacks have doubled since 2023 - Gulf Tech News","description":"Kaspersky: DLL hijacking attacks have doubled since 2023","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/","og_locale":"en_US","og_type":"article","og_title":"Kaspersky: DLL hijacking attacks have doubled since 2023 - Gulf Tech News","og_description":"Kaspersky: DLL hijacking attacks have doubled since 2023","og_url":"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/","og_site_name":"Gulf Tech News","article_published_time":"2025-11-05T10:54:40+00:00","article_modified_time":"2025-11-05T10:54:45+00:00","og_image":[{"width":780,"height":405,"url":"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/11\/Kaspersky-New-Logo.png?v=1762340068","type":"image\/png"}],"author":"bessan helmi","twitter_card":"summary_large_image","twitter_misc":{"Written by":"bessan helmi","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/","url":"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/","name":"Kaspersky: DLL hijacking attacks have doubled since 2023 - Gulf Tech News","isPartOf":{"@id":"https:\/\/gulftech-news.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/#primaryimage"},"image":{"@id":"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/#primaryimage"},"thumbnailUrl":"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/11\/Kaspersky-New-Logo.png?v=1762340068","datePublished":"2025-11-05T10:54:40+00:00","dateModified":"2025-11-05T10:54:45+00:00","author":{"@id":"https:\/\/gulftech-news.com\/en\/#\/schema\/person\/c033626e357b2f7e127eac0570ddc05c"},"description":"Kaspersky: DLL hijacking attacks have doubled since 2023","breadcrumb":{"@id":"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/#primaryimage","url":"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/11\/Kaspersky-New-Logo.png?v=1762340068","contentUrl":"https:\/\/gulftech-news.com\/en\/wp-content\/uploads\/2025\/11\/Kaspersky-New-Logo.png?v=1762340068","width":780,"height":405,"caption":"Kaspersky: DLL hijacking attacks have doubled since 2023"},{"@type":"BreadcrumbList","@id":"https:\/\/gulftech-news.com\/en\/2025\/11\/05\/kaspersky-dll-hijacking-attacks-have-doubled-since-2023\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/gulftech-news.com\/en\/"},{"@type":"ListItem","position":2,"name":"Kaspersky: DLL hijacking attacks have doubled since 2023"}]},{"@type":"WebSite","@id":"https:\/\/gulftech-news.com\/en\/#website","url":"https:\/\/gulftech-news.com\/en\/","name":"Gulf Tech News","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/gulftech-news.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/gulftech-news.com\/en\/#\/schema\/person\/c033626e357b2f7e127eac0570ddc05c","name":"bessan helmi","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/gulftech-news.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/bb1e09a6f094e0fa605073926f8ad9eb228a8b0aacd381fda782c562612428cf?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/bb1e09a6f094e0fa605073926f8ad9eb228a8b0aacd381fda782c562612428cf?s=96&d=mm&r=g","caption":"bessan helmi"},"url":"https:\/\/gulftech-news.com\/en\/author\/bessan-helmi\/"}]}},"_links":{"self":[{"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/posts\/82203","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/comments?post=82203"}],"version-history":[{"count":1,"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/posts\/82203\/revisions"}],"predecessor-version":[{"id":82207,"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/posts\/82203\/revisions\/82207"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/media\/82206"}],"wp:attachment":[{"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/media?parent=82203"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/categories?post=82203"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gulftech-news.com\/en\/wp-json\/wp\/v2\/tags?post=82203"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}