A sophisticated custom loader named PhantomVAI has emerged in global phishing campaigns, delivering various stealers and remote access trojans (RATs) to compromised systems. This malware loader operates by masquerading as legitimate software and employing process hollowing techniques to inject malicious payloads into Windows processes. Security researchers across multiple organizations have documented this threat under different […] The post PhantomVAI Custom Loader Uses RunPE Utility to Attack Users appeared first on Cyber Security News.