Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption

A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers detailed how the malware employs ClickFix delivery, shortcut-based persistence, and remote command execution capabilities, highlighting its resilience against takedown efforts by security teams.