Topic

Malware obfuscation

Techniques malware authors use to keep code and data unreadable to static analysis and signature matching, including string encryption, packing, control-flow flattening and virtualised bytecode.

Current clusters

security1 publisher

Vidar now hides its strings behind a bytecode VM whose opcodes change with every build

Zscaler tracked three changes to Vidar's string encryption between early May and early September 2026, ending in a per-build virtual machine and stream cipher that make a key pulled from one sample useless against the next.

Publishers:zscaler.com

Reality

Evidence70
Adoption45
Hype gap+10
Incentives55
Confidence60