<![CDATA[Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption]]>

<![CDATA[Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption]]>A new Windows malware loader dubbed AvisLoader is drawing attention for its use of encrypted peer-to-peer communications, a design choice that makes its command-and-control infrastructure significantly harder to take down. According to research from Varonis, the loader combines several familiar Windows abuse techniques with a resilient C2 model.

Delivery and persistence

The malware is delivered through ClickFix, a social-engineering technique that tricks users into running malicious commands themselves.
Persistence is established via shortcut-based mechanisms on the infected host.
Once active, the loader provides remote command execution capabilities to its operators.

The peer-to-peer component is the standout feature: rather than relying solely on centralized servers that defenders can seize or block, AvisLoader uses encrypted P2P communications, complicating disruption efforts.

The researchers have not published a specific CVE identifier for this threat, so no advisory number is cited here.

Source: BleepingComputer

Has your organization encountered ClickFix-style delivery attempts, and how are you defending against them?

]]>https://xploitlk.com/topic/661/inside-avisloader-a-windows-malware-loader-built-to-resist-disruptionRSS for NodeTue, 27 Oct 2026 07:24:53 GMTMon, 12 Oct 2026 14:30:21 GMT60