ResearchMicrosoft Windows endpoints
Cruciferra Crypter: How a $450-a-Month Service Hides RATs From EDR
Proofpoint has published an analysis of Cruciferra, a crypter service sold since autumn 2025 that combines BYOVD driver abuse, API unhooking and a modified Process Ghosting routine to deliver commodity RATs and infostealers through phishing.