BYPASSING WINDOWS DEFENDER APPLICATION CONTROL WITH LOKI C2

Summary from the TLDR InfoSec newsletter

Attackers can bypass Windows Defender Application Control with LOLBINs and Electron apps using tools like Loki C2. Modifying JavaScript in trusted Electron apps enables Node.js code injection to interact with the OS, allowing the execution of malicious payloads and the creation of advanced C2 agents like Dragon.