Security3 min read
Sleepwalker is a quiet Windows backdoor that waits for a magic packet
Dominik Reichel described a 64-bit DLL that impersonates dpapi.dll and side-loads into ESET’s ERAAgent.exe. It has no default beacon and can exfiltrate over VMware VMCI.
