Hackers Exploit MSBuild LOLBin to Evade Detection in Fileless Windows Attacks

**Executive summary:** The report details how attackers are repurposing MSBuild.exe as a LOLBin to execute inline C# project files for fileless payloads, evade signature-based defenses (including a PoC bypassing Windows Defender), and deliver PlugX via a phishing campaign using DLL sideloading; it concludes with detection and mitigation recommendations.