Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption（P2P通信で遮断を回避するWindowsローダーAvisLoaderの分析） #BleepingComputer (Oct 12)
#AvisLoader #ClickFix #ToxP2P #C2通信 #端末検知
www.bleepingcomputer.com/news/securit...

AvisLoader's C2 runs over Tox P2P - no domain to sinkhole, delivered by fake DocuSign ClickFix lures. https://intel.threadlinqs.com/threat/TL-2026-3362 #ThreatIntel #AvisLoader #UACMe #ClickFix

📢 AvisLoader : un loader Windows utilisant Tox P2P pour résister aux takedowns de C2

Les chercheurs ont découvert AvisLoader sur un serveur de staging exposé, accompagné d'un leurre ClickFix, d'outils annexes et de son panneau de…

🟢 vérification factuelle haute
#AvisLoader #ToxP2P #Cyberveille

AvisLoader uses P2P and fake verification pages to stay alive even after its servers go down. #AvisLoader #Malware #WindowsSecurity #PeerToPeer #CyberThreat #Infosec https://thedailytechfeed.com/avisloader-malware-resists-takedowns-with-p2p-command-network/

Another day, another Windows malware - A fake DocuSign page tells victims to paste a command into their computer, quietly opening the door to AvisLoader malware

Listen/Read: hackread.com/avisloader-w...

#Cybersecurity #Malware #ClickFix #AvisLoader #Scam

Varonis Threat Labs uncovered AvisLoader, a Windows loader spread via ClickFix, using Tox for C2 and tools for persistence, UAC bypass, and process hiding. #AvisLoader #Tox #ClickFix

~Varonis~
AvisLoader uses ClickFix delivery and Tox P2P C2 to evade domain takedowns.
-
IOCs: trycloudflare[.]com, workers[.]dev, 35dd164a7f5d8b42b9870c7009f7425b1c8cb771280c9e6c525e09f3dd13c2cc
-
#AvisLoader #ClickFix #Malware #ThreatIntel