Payouts King Privilege Escalation: UAC Bypass and Token Elevation to SYSTEM

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•3

Detects potential privilege escalation activity including manual privilege discovery using 'whoami /priv', suspicious elevated processes spawned from non-elevated parents, and specific scheduled task execution patterns associated with Payouts King malware.