New AvisLoader Windows Malware Uses ClickFix Lure and Tox P2P for C2

Varonis Threat Labs discovered AvisLoader, a Windows loader that uses the Tox P2P messaging protocol for decentralized command-and-control, delivered through a ClickFix/DocuSign social engineering lure; the package includes persistence via shortcut modification, a potential UAC bypass, process-hiding components, and a web-based command center for remote commands and file distribution.