Cruciferra: new crypter hides Windows malware via BYOVD and Process Ghosting

Colleagues, I’d like to draw your attention to a cybersecurity development.

Cruciferra is a crypter used to conceal Windows malware and evade security controls.

Key points:
• attacks are delivered via DLL side-loading and phishing emails;
• it uses BYOVD, disables checks, and Process Ghosting;
• targets include RATs and stealers across finance, government, healthcare, education, and manufacturing.

Why it matters: these techniques make detection and incident response much harder.

How do you protect endpoints against chains like this?

#cybersecurity #malware #phishing #WindowsSecurity