‘BoundHook’ Technique Enables Attacker Persistence on Windows Systems

Security researchers at CyberArk have developed a technique showing how attackers can exploit a feature in the Memory Protection Extension (MPX) technology on modern Intel chips to steal data from Windows 10 systems. Intel’s MPX technology is designed to protect applications against buffer overflows, out-of-bounds access, and other memory errors and attacks. Most antivirus tools are not equipped to detect the malicious activity that is enabled via BoundHook, according to CyberArk. Microsoft has downplayed the issue as a vulnerability that merits a security patch.”]

Source: https://www.darkreading.com/attacks-breaches/-boundhook-technique-enables-attacker-persistence-on-windows-systems