Cyber Threat Actors Utilizing AES Encryption for Advanced Payload Concealment

Cybersecurity researchers at Palo Alto Networks’ Unit 42 have uncovered a cluster of malware samples employing advanced obfuscation techniques to evade detection and analysis. The malware, which includes variants of Agent Tesla, XWorm, and FormBook/XLoader, utilizes a multi-stage approach incorporating AES encryption, code virtualization, and dynamic code loading to conceal its malicious payloads. Multi-Stage Payload … Continue reading Cyber Threat Actors Utilizing AES Encryption for Advanced Payload Concealment