GoKawiilVaronis finds AvisLoader malware using Tox P2P network to evade takedowns
Varonis Threat Labs discovered AvisLoader, a new Windows malware loader found on an exposed staging server alongside a ClickFix phishing lure and its control panel. The malware is delivered via a fake DocuSign verification page hosted on Cloudflare Workers that tricks victims into pasting and running a malicious command, which then fetches code from a Cloudflare Quick Tunnel address.