THE Cruciferra crypter service, identified by Proofpoint, is an advanced malware-packing tool that allows multiple cybercriminal organizations to conceal and deliver malware, primarily remote access trojans (RATs) and infostealers. The service targets opportunistic sectors, such as financial services, healthcare, and government, using email campaigns to distribute its payloads via DLL side-loading from executable files.
Key features include sophisticated evasion techniques, custom encryption routines, and a structured pricing model ranging from $450 to $2,000 monthly. Significant observed payloads include AsyncRAT and XWorm, underscoring its utility across various cyber threats. Defense strategies recommend focusing on behavior detection over signature-based methods.