Running code with administrator rights without showing Windows’ User Account Control consent prompt.
User Account Control makes even programs running under an administrator account ask for consent for operations that require elevation. Bypass techniques abuse certain auto-elevating Windows components to skip this consent. Microsoft Learn
Most infostealers make do with user rights; UAC bypass is used more to establish persistence, disable security tools or access other users’ data. MITRE ATT&CK
A Windows program that runs with administrator rights without asking for consent is targeted. MITRE ATT&CK
A registry key or file path the program reads is redirected to the attacker’s command. MITRE ATT&CK
When the program starts, the attacker’s command runs with administrator rights.
We use cookies to ensure proper operation of our website, analyze usage, and deliver relevant content and advertisements. You can manage your preferences at any time. Cookie Policy