Security · 2h ago
Cruciferra Crypter Deploys BYOVD and Process Ghosting to Evade Detection
A China-linked cybercrime group uses the Cruciferra crypter to deliver malware via tax-themed phishing lures targeting Indian taxpayers and firms. The crypter employs BYOVD and process ghosting techniques to evade security tools. Proofpoint found multiple unrelated threat clusters using Cruciferra to distribute remote access trojans.
Meridian48 take
The use of BYOVD and process ghosting shows attackers are adopting sophisticated evasion methods, but the focus on Indian tax targets suggests a narrower operational scope than the headline implies.
Read the full reporting
Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware →
The Hacker News
cybercrimemalware-evasion