Advanced Malware Crypter Cruciferra Leverages BYOVD and Process Ghosting for Evasion on Windows

Cruciferra is a sophisticated Windows malware crypter using BYOVD and Process Ghosting techniques to evade detection, targeting multiple sectors through phishing campaigns. It employs advanced evasion methods including API unhooking, privilege escalation, and memory-based payload execution to avoid forensic analysis.

The China-linked cybercrime group behind the use of income tax-related phishing lures targeting Indian taxpayers, tax professionals, and corporate finance teams has been observed using a sophisticated crypter service called Cruciferra.

According to a new analysis by Proofpoint, Cruciferra has been utilized by various unrelated cybercriminal threat clusters to deliver a wide array of remote

Read original article