In reply to xedi25.

Yes, we haven't said that it is a brand-new technology. We have highlighted how this technology is used by a malware for the first time (or at least based on what I have analysed in my like).
The process injection technique is absolutely not new. I agree, nobody has said the opposite. The important feature of this dropper is that it is able to use the TOR network to communicate with the C&C and its ability to switch the processor execution modes.
Personally, I didn't know the existence of that document (heaven’s gate technique). Thanks for the signal.

Andrea