#AvisLoader
Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption

A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses ClickFix…
#hackernews #news
Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses ClickFix delivery, shortcut-based persistence, and remote command execution capabilities. [...]
www.bleepingcomputer.com
October 13, 2026 at 12:45 PM
Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption(P2P通信で遮断を回避するWindowsローダーAvisLoaderの分析) #BleepingComputer (Oct 12)
#AvisLoader #ClickFix #ToxP2P #C2通信 #端末検知
www.bleepingcomputer.com/news/securit...
Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware…
www.bleepingcomputer.com
October 13, 2026 at 4:00 AM
AvisLoader colpisce Windows: il malware usa una rete P2P cifrata per non farsi spegnere
AvisLoader sfrutta ClickFix e la rete cifrata ...
https://www.ilsoftware.it/avisloader-colpisce-windows-il-malware-usa-una-rete-p2p-cifrata-per-non-farsi-spegnere/
October 13, 2026 at 10:00 AM
Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption

A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make its command-and-control infrastructure harder to dis... https://threatintel.cc/2026/10/13/inside-avisloader-a-windows-malware.html
October 13, 2026 at 9:02 AM
AvisLoader spreads via fake DocuSign ClickFix pages and talks to its operator over the Tox peer-to-peer network, dodging takedowns. Block clipboard-paste command execution and watch for rewritten shortcuts. https://cti.securitycyber.uk
October 13, 2026 at 5:14 PM
🤖 AvisLoader: Windows loader using encrypted P2P C2 comms to survive takedowns. ClickFix delivery, shortcut persistence, remote command exec (Varonis).
https://www.bleepingcomputer.com/news/security/inside-avisloader-a-windows-malware-loader-built-to-resist-disruption/
October 12, 2026 at 9:55 PM
Researchers describe AvisLoader, a Windows malware loader delivered through a ClickFix lure. It uses encrypted Tox peer-to-peer messaging for commands and payloads, with recovered files showing shortcut-persistence and other endpoint capabilities.
AvisLoader Uses Tox P2P Messaging to Resist Windows Malware Disruption
Researchers describe AvisLoader, a Windows malware loader delivered through a ClickFix lure. It uses encrypted Tox peer-to-peer messaging for commands and…
cyber.hendryadrian.com
October 12, 2026 at 8:00 PM
AvisLoader's C2 runs over Tox P2P - no domain to sinkhole, delivered by fake DocuSign ClickFix lures. https://intel.threadlinqs.com/threat/TL-2026-3362 #ThreatIntel #AvisLoader #UACMe #ClickFix
October 12, 2026 at 2:20 PM
AvisLoader: Windows Malware Loader Uses Encrypted P2P to Resist Disruption
AvisLoader: Windows Malware Loader Uses Encrypted P2P to Resist Disruption
AvisLoader is a Windows malware loader featuring encrypted peer-to-peer communications, shortcut-based persistence, and ClickFix delivery. No active exploitation has been observed to date.
deafnews.it
October 12, 2026 at 5:12 PM
Dentro de AvisLoader: Un loader de malware para Windows diseñado para resistir interrupciones. (Inglés)

Vía: @bleepingcomputer.com
Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses...
www.bleepingcomputer.com
October 12, 2026 at 6:30 PM
AvisLoader is a Windows malware loader that uses encrypted peer-to-peer communications to make its command-and-control infrastructure harder to disrupt.

Source: BleepingComputer
Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses ClickFix delivery, shortcut-based persistence, and remote command execution capabilities.
www.bleepingcomputer.com
October 12, 2026 at 2:38 PM
AvisLoader uses ClickFix lures and Tox P2P C2—don’t paste “fix” commands. MyID Authenticate adds FIDO passkeys for Win10/11 logon and VPNs. Image Backup restores unbootable PCs. Explorer groups Downloads by Type/Date. +26 more stories, 10 new members
AvisLoader Windows Malware Uses ClickFix Lures and Tox P2P C2 to Resist Takedowns
Some malware arrives with clever exploits. AvisLoader gets in a much simpler way: it asks you to run it. What makes it worth a closer look is how it stays in contact with its operator afterward.…
windowsforum.com
October 12, 2026 at 6:00 PM
AvisLoader:耐性を持つ Windows マルウェアローダーが発見

Varonis が発見した AvisLoader は、暗号化された P2P 通信で C&C インフラを保護し、ClickFix 配信、ショートカット経由の永続化、リモートコマンド実行機能を備えている。中断困難な設計が特徴。

#マルウェア #情報セキュリティ
AvisLoader:耐性を持つ Windows マルウェアローダーが発見
Varonis が発見した AvisLoader は、暗号化された P2P 通信で C&C インフラを保護し、ClickFix 配信、ショートカット経由の永続化、リモートコマンド実行機能を備えている。中断困難な設計が特徴。
www.bleepingcomputer.com
October 12, 2026 at 2:01 PM
AvisLoader の内部構造:妨害に耐えるよう設計された Windows 向けマルウェアローダー

Varonis Threat Labsは最近、ラテン語で「鳥」を意味する言葉にちなんで名付けられた新しい Windows 向けローダー「AvisLoader」を発見しました。ClickFix のおとり、補助ツール、管理画面(Command Center)とともに、公開状態のステージングサーバー上で見つかったものです。
AvisLoader の内部構造:妨害に耐えるよう設計された Windows 向けマルウェアローダー
Varonis Threat Labsは最近、ラテン語で「鳥」を意味する言葉にちなんで名付けられた新しい Windows 向けローダー「AvisLoader」を発見しました。ClickFix のおとり、補助ツール、管理画面(Command Center)とともに、公開状態のステージングサーバー上で見つかったものです。
blackhatnews.tokyo
October 12, 2026 at 2:08 PM
📢 AvisLoader : un loader Windows utilisant Tox P2P pour résister aux takedowns de C2

Les chercheurs ont découvert AvisLoader sur un serveur de staging exposé, accompagné d'un leurre ClickFix, d'outils annexes et de son panneau de…

🟢 vérification factuelle haute
#AvisLoader #ToxP2P #Cyberveille
AvisLoader : un loader Windows utilisant Tox P2P pour résister aux takedowns de C2
Les chercheurs ont découvert AvisLoader sur un serveur de staging exposé, accompagné d'un leurre ClickFix, d'outils annexes et de son panneau de commande. 🎯 Vecteur d'infection : L'attaque débute par un leurre ClickFix hébergé sur Cloudflare Workers, se faisant passer pour une demande de signature DocuSign.
cyberveille.ch
September 28, 2026 at 11:00 PM
-Over 16k Supabase databases exposed online
-New malware: RemotePanel, BoundSiphon, Kothamine Agent, Lunex infostealer, Mantax Otax, AvisLoader
-New screen locker detected in the wild
-PolinRider runs A/B tests
-DPRK deploys female operatives
-XCTDH adopts new blockchain hiding technique
September 28, 2026 at 8:06 AM
Meet AvisLoader: A Windows Loader Built to Outlast a Takedown

Discover how AvisLoader uses Tox peer-to-peer messaging for C2, ClickFix delivery, shortcut persistence, and payload distribution without fixed domains.
#hackernews #news
Meet AvisLoader: A Windows Loader Built to Outlast a Takedown
Discover how AvisLoader uses Tox peer-to-peer messaging for C2, ClickFix delivery, shortcut persistence, and payload distribution without fixed domains.
hackernoon.com
September 25, 2026 at 8:23 PM
Meet AvisLoader: A Windows Loader Built to Outlast a Takedown
Meet AvisLoader: A Windows Loader Built to Outlast a Takedown
www.varonis.com
September 25, 2026 at 1:24 PM
New AvisLoader Windows Malware Uses ClickFix Lure and Tox P2P for C2

Varonis Threat Labs discovered AvisLoader, a Windows malware loader that uses the Tox peer-to-peer network for C2 and arrives through a malicious ClickFix lure.
#hackernews #news
New AvisLoader Windows Malware Uses ClickFix Lure and Tox P2P for C2
Varonis Threat Labs discovered AvisLoader, a Windows malware loader that uses the Tox peer-to-peer network for C2 and arrives through a malicious ClickFix lure.
hackread.com
September 25, 2026 at 7:11 AM
Varonis Threat Labs recently discovered AvisLoader, a new Windows loader named after the Latin word for bird. They found it on an exposed staging server alongside a ClickFix lure, supporting tools, and its command centre. www.varonis.com/blog/meet-av...
September 25, 2026 at 9:19 AM