Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption

A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make its command-and-control infrastructure harder to disrupt. Varonis researchers detail its ClickFix delivery, shortcut-based persistence, and remote command execution capabilities.