Cybercriminals Can Now Rent Malware That Re-Encrypts Itself to Keep Evading Antivirus
Brief
Cybercriminals are renting services that help malware change its appearance and avoid detection. Cruciferra, a crypter-as-a-service platform linked to campaigns that used tax-themed emails to target victims, including Indian taxpayers and finance professionals.
The service is not the final malware. Instead, it wraps harmful programs in a protective layer, making them harder for antivirus products to recognize before execution.
This model lowers the barrier for crime. An operator can buy or rent access, upload a remote-access trojan , information stealer, or ransomware payload, and receive a protected file.
The criminal does not need to build advanced evasion code from scratch. That turns specialist tradecraft into a subscription product and lets unrelated groups use the same hiding service.
Rental Malware Defeats Antivirus
A crypter encrypts or obscures the real payload.