other

AvisLoader

Windows loader malware, named from the Latin word for bird, that receives operator commands and payloads over the Tox peer-to-peer network and is offered for sale on cybercrime forums.

Known aliases

AvisLoader Command Center

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

A Windows loader for sale on a crime forum takes its orders over Tox peer-to-peer messaging

AvisLoader statically links the reference Tox client, so its operator keeps the same identity after moving to a new server. The ClickFix page and Cloudflare tunnel that deliver it are still ordinary takedown targets.

Publishers:varonis.com

Reality

Evidence66
Adoption20
Hype gap+18
Incentives62
Confidence57