Emerging Malware Threats: AvisLoader and SmartApeSG Campaigns

• •AvisLoader uses Tox P2P for C2 communication, enhancing its resilience.
• •SmartApeSG campaign delivers RAT and MeshAgent via ClickFix social engineering.
• •Organizations should enhance user training and monitor for suspicious activity.

Two recent cybersecurity threats have been identified, AvisLoader and SmartApeSG, both leveraging ClickFix social engineering tactics. AvisLoader is a Windows malware loader utilizing the Tox P2P network for command-and-control communication, often distributed via DocuSign-themed lures. SmartApeSG delivers a Remote Access Trojan (RAT) and MeshAgent through similar ClickFix schemes, employing password-protected ZIP archives for distribution. Both campaigns exploit user trust and require organizations to enhance user training and endpoint monitoring. Security teams are advised to monitor for suspicious Cloudflare activity and unauthorized execution of remote access tools. The ongoing threat landscape indicates a growing reliance on decentralized communication methods by attackers. Organizations must remain vigilant and implement robust detection and response strategies to mitigate these risks.