"Cybercriminals Using Powerful BatCloak Engine to Make Malware Fully Undetectable"

Since September 2022, a fully undetectable (FUD) malware obfuscation engine named BatCloak has been used to launch different malware strains while persistently bypassing antivirus detection. According to Trend Micro researchers, the samples enable threat actors to easily load multiple malware families and exploits via highly obfuscated batch files. The cybersecurity firm noted that about 79.6 percent of the total 784 unearthed artifacts were undetected by all security solutions, highlighting BatCloak's ability to evade traditional detection mechanisms. The BatCloak engine is at the core of the batch file builder tool Jlaive, which can bypass Antimalware Scan Interface (AMSI) as well as compress and encrypt the primary payload to achieve heightened security evasion. This article continues to discuss the FUD malware obfuscation engine BatCloak. 

THN reports "Cybercriminals Using Powerful BatCloak Engine to Make Malware Fully Undetectable"

Submitted by Anonymous on