Do Son OysterLoader malware uses custom LZMA & steganography to evade tools. Linked to Rhysida ransomware, it hides in fake IT installers.
API hammering
Learn about the evolution of LegionLoader, a sophisticated downloader malware with a wide range of capabilities, including capturing screenshots and stealing information.