September 2, 2021

An individual on a hacker forum recently claimed that they had sold the proof-of-concept for a technique that protects malicious code from security solutions that scan a device’s RAM.

The individual said that the technique uses the GPU memory buffer to store and execute malicious code from there. They also explained that the process only works on Windows systems that support versions 2.0 and higher of the OpenCL framework.

The author says they tested the code on Intel UHD 620 / 630 graphics cards, Radeon RX 5700 and GeForce GTX 740M, and GTX 1650 GPUs.

Although this method is not new, as the demo code was previously released, the sale of the proof-of-concept underscores the fact that hackers are now advancing to a new level of sophistication for their attacks.

For more information, read the original story in Bleeping Computer.