Hunting for Unsigned DLLs to Find APTs

Unit 42 researchers found that the most common techniques that are being used by threat actors in the wild are DLL loading by rundll32.exe/regsvr32.exe and loading malicious DLLs by abusing the search order of a legitimate process.