Product
Adversaries leverage Phantom DLL hijacking by planting malicious libraries in privileged system paths to achieve local privilege escalation and persistence via legitimate Windows services.