Screening Serpens - Hiring Portal DLL Sideloading

Ibrahim Saud@tektrix

•updated Jun 19, 2026•0•0•2

Identifies 'setup.exe' originating from a 'Hiring Portal' directory loading the 'UpdateChecker.dll'. This behavior is indicative of DLL sideloading, a technique used by the 'Screening Serpens' APT group.