Palo Alto Networks’ Unit 42 has revealed multiple sophisticated malware campaigns using advanced encryption and code virtualisation techniques to avoid detection. Attackers are employing the Advanced Encryption Standard (AES) and symmetric keys to encrypt malware payloads. The technique is more difficult to analyse than basic XOR-based obfuscation. Agent Tesla, XWorm, and FormBook/XLoader samples have been found to use these advanced methods, indicating a significant enhancement of malware sophistication.

Malware-free attacks surged in 2024 as attackers drop malicious software for legitimate tools
New research reveals that cyber attacks are increasingly using trusted services to carry out malicious activities instead of relying primarily on malware. This shift in