Malware Crypter Services Sell Windows Defender, EDR and SmartScreen Bypasses to Cybercriminals
Brief
Criminal services that hide malware are becoming easier to buy. These services, known as crypters, change a malicious file so that security tools struggle to recognize it.
Their operators promise customers a way around Windows Defender, endpoint detection and response tools, and Microsoft SmartScreen. The change helps attackers move familiar malware past controls that would otherwise flag it early.
The danger is not a single new malware family. It is a commercial layer that helps many kinds of malware reach victims with less scrutiny.
Criminals can package remote access tools, stealers, or ransomware loaders into files designed to look different each time they are delivered.
Recorded Future said in a report shared with Cyber Security News (CSN) that a successful bypass can give an intrusion time to establish itself before defenders know a harmful program is present.