DLL Hijacking

Definitions

1. A technique that causes a Windows application to load a malicious dynamic-link library instead of the intended legitimate one, often by abusing search order or missing-path assumptions. It can be used for persistence, privilege escalation, or initial execution.

   In plain English: Tricking a Windows program into loading a malicious library file.

   Example: "The attacker gained code execution through DLL hijacking in a trusted updater that searched the working directory first."

Related Terms

• Rootkit
• APT
• Execution Policy
• Active Directory
• Advanced Persistent Threat
• Bitlocker
• Group Policy
• Kerberos
• Persistent Backdoor
• Persistent Threat