Popular Malware Families Using 'Process Doppelgänging' to Evade Detection

Popular Malware Families Using 'Process Doppelgänging' to Evade Detection. Process Doppelgänging is a fileless code injection technique that takes advantage of a built-in Windows function to launch a malicious process by replacing the memory of a legitimate process, tricking process monitoring tools and antivirus into believing that the legitimate process is running. More than 20 different malware families have been using malware loaders that leverage this hybrid implementation of Process Doppelgänging attack to evade detection