Are Cyber Criminals Using Plus-Sized Malware To Fool AV?

Researchers observed a trend of unusually large malware droppers (16 MB to >200 MB) being delivered by exploit kits and forums; the oversized executables likely aim to frustrate AV cloud submission and realtime detection, and some samples connect to a China-based C2 that deploys additional malware including click-fraud Trojans.