New Malware Loaders Use Call Stack Spoofing, GitHub C2, and .NET Reactor for Stealth

Hijack Loader now uses call stack spoofing and ANTIVM modules to bypass detection and persist.
More info