ToddyCat Group Abused Flaw in ESET Security Software to Plant Malicious DLLs

During the campaign, the hackers exploited the ESET vulnerability (CVE-2024-11859) to load a new tool dubbed TCDSB onto victims' devices, disguising it as a legitimate DLL — a common file type in the Windows operating system.