❌

Normal view

Received β€” 19 October 2026 ⏭ /r/netsec - Information Security News & Discussion

PhantomBuffer: Effective EDR Evasion Through Stealth Injection

PhantomBuffer EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response).

Unlike traditional edr bypass techniques, it does not use the VirtualAllocEx and WriteProcessMemory APIs.

submitted by /u/Cold-Dinosaur
[link] [comments]
❌