PROOFPOINT'S research has unveiled Cruciferra, a sophisticated crypter-as-a-service enabling hackers to effectively avoid antivirus detection and carry out diverse malware campaigns worldwide. Designed with advanced techniques such as indirect system calls and Process Ghosting, Cruciferra allows malicious payloads to be concealed and undetected. Its modular architecture and variable encryption methods complicate static defenses significantly.
Advertised on underground platforms for substantial monthly fees, it notably assists in various cybercrime activities, including impersonation scams related to tax documents. Cruciferra’s techniques allow malware to manipulate system functions, evade security processes, and stay concealed, marking it as a highly effective tool in the cybercriminal arsenal.