Latest DLL hijacking news

Fake job interviews on Google Forms are installing the PureHVNC trojan. Malwarebytes found forms impersonating real companies in finance and tech, linking to ZIP files that deploy a multi-stage infection chain with DLL hijacking and crypto wallet theft.

March 9 brought 117 new CVEs but no critical-severity entries. The two worth tracking are an unpatched UltraVNC DLL hijack with a public exploit, and two Tiandy surveillance flaws from a vendor that has ignored disclosures since 2017.