Skip to content
Threat Feed
Subscribe

Tag

Rtlo

2 briefs RSS
medium advisory

Right-to-Left Override (RTLO) Masquerading

Adversaries use the Right-to-Left Override (RTLO) character in filenames to disguise malicious files and trick users into executing them, leading to potential malware infection and system compromise.

Windows defense-evasion masquerading rtlo
3r 2t
medium advisory

File with Right-to-Left Override Character (RTLO) Created/Executed

This rule detects the creation or execution of files or processes with names containing the Right-to-Left Override (RTLO) character, which can be used to disguise the file extension and trick users into executing malicious files on Windows systems.

Elastic Defend +2 defense-evasion rtlo masquerading windows
2r 2t