https://blog.it-learn.io/tags/fileless-malware/Recent content in Fileless-Malware on it-learn.io | IT, Networking & Cybersecurity BlogHugoen-usSat, 11 Apr 2026 00:00:00 +0000https://blog.it-learn.io/posts/2026-04-11-living-off-the-land-lolbins-attackers-using-your-tools/Sat, 11 Apr 2026 00:00:00 +0000https://blog.it-learn.io/posts/2026-04-11-living-off-the-land-lolbins-attackers-using-your-tools/<p>APT29 did not land on the DNC network in 2016 with custom malware. They used PowerShell Empire — a framework built entirely on Windows&rsquo; own scripting infrastructure. The SolarWinds attackers deployed TEARDROP as a memory-only shellcode loader. Carbanak stole over $1 billion from banks using WMI and PowerShell for persistence and lateral movement without dropping traditional malware files.</p> <p>Living Off the Land (LOTL) attacks are not a niche technique — they are the standard operating procedure for every serious threat actor today. The fundamental insight is elegant: if you use the operating system&rsquo;s own tools, your activity looks like the operating system&rsquo;s own activity.</p>