The experts at Yoroi -Cybaze Zlab described three techniques commonly implemented by threat actors to avoid detection. The first two are techniques related to Office documents, used to hide malicious payload and lure the users. The third one is related to binary payloads abusing code signature tricks to evade traditional security controls. The techniques are effective and actually help the cyber criminals to get into victim computers and penetrate company networks. This technical article aims to bring to light details of some of the techniques currently abused by various threat actors.”]
Source: https://securityaffairs.co/wordpress/86001/malware/three-techniques-avoid-detection.html