Threat actors are using novel living-off-the-land (LOTL) tactics to better evade detection, according to HP Wolf’s Q2 2025 Threat Insights Report. These tactics include the growing use of multiple, often uncommon binaries in a single campaign and novel uses of image files, making it harder for security teams to distinguish between malicious and legitimate activity. Alex Holland, a principal threat researcher at HP Security Lab, explained: “We’re seeing more chaining of living-off-the-land tools and use of less obvious file types, such as images, to evade detection. Take reverse shells as an example – you don’t have to drop a fully-fledged remote access Trojan (RAT) when a simple, lightweight script will achieve the same effect. It’s simple, fast and often slips under the radar because…