Check Point Research exposes GachiLoader, a Node.js loader in the YouTube Ghost Network, and shows how API tracing defeats its obfuscation.
GachiLoader: Defeating Node.js Malware with API Tracing GachiLoader: Defeating Node.js Malware
Related articles
