Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
Varonis details AvisLoader, a Windows malware loader using ClickFix lures and Tox peer-to-peer command and control.
58
Product
DocuSign
- Mentions · 7d0
- Mentions · 30d1
- All mentions4
- First seenSep 10, 2026
- Last mentioned18d ago
Timeline
4 articles · newest firstCSuite Targets US and EU Organizations with Device-Code Phishing and Remote Access
CSuite targets US and EU organizations with device-code phishing and remote access. 60% of identified victims are US-based; 351 related sandbox analyses detected; 23 modules in the phishing panel.
90
Hackers Use Blob URLs and Microsoft Teams to Create Phishing Pages Inside Victims’ Browsers
Barracuda details a phishing campaign using Microsoft Teams OAuth redirects and browser blob URLs to render local fake DocuSign login pages for credential theft.
48
New Phishing Attack Uses Blob URLs to Hide Malicious Pages From Security Scanners
Barracuda detailed a DocuSign-themed phishing campaign that renders credential-harvesting pages as browser blob URLs, evading URL reputation and blocklist defenses.
48
Appears with
- Microsoftvendor · 3
- Barracudavendor · 2
- Barracudaorganization · 2
- Microsoft Teamsproduct · 2
- DocuSignvendor · 2
- Ateraproduct · 1
- AvisLoadermalware · 1
- Action1product · 1
- Windowsproduct · 1
- Google Meetproduct · 1
- Adobevendor · 1
- Google Meetorganization · 1
- Microsoft 365product · 1
- DocuSignorganization · 1
- PDQ Connectproduct · 1
- Dropboxorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.