Skip to content
Threat Feed
Subscribe

Tag

Deployment-Technology

1 brief RSS
medium advisory

New Abuse of ClickOnce Technology: Understanding Internals

CrowdStrike details the internal mechanisms of Microsoft's ClickOnce technology, a legitimate software deployment method that offers minimal user interaction and no administrative privilege requirements, making it a double-edged sword with significant potential for threat actor abuse in malware distribution and persistence.

.NET Framework +1 clickonce windows deployment-technology abuse-of-feature defense-evasion execution
2t