
Varonis researchers uncover AvisLoader, a Windows malware using encrypted P2C2
Varonis Threat Labs details AvisLoader, a new Windows loader that uses Tox for encrypted peer-to-peer command and control to resist takedowns.
Everything Threat Times has reported about ClickFix: 5 stories, newest first. Part of our Cyber Attacks coverage.

Varonis Threat Labs details AvisLoader, a new Windows loader that uses Tox for encrypted peer-to-peer command and control to resist takedowns.

A new variant of the ClickFix attack technique uses cached browser data to execute payloads, circumventing standard Windows security restrictions on remote code execution.

Attackers are storing VBScript payloads in browser cache to evade execution length restrictions, according to Infosecurity Magazine.

Threat actors behind the ClickFix campaign are using DNS TXT records and browser cache pre-fetching to conceal malicious payloads, complicating early-stage detection.

Attackers are leveraging legitimate Bing search redirects within Google Ads to trick users into downloading fake Claude installers that deploy the ClickFix malware.