Updated Cerber ransomware can hide from machine learning tools

Ransomware variant Cerber has introduced a new loader that can avoid detection from machine learning tools, according to researchers at Trend Micro. The malware, which commonly targets the healthcare sector, spreads via email, connected to a self-extracting archive on Dropbox. The new loader allows the file to look safe to machine-learning tools, potentially bypassing detection. Additionally, the malware stops running if it detects analysis tools or certain anti-malware software on the targeted system, in order to avoid detection and analysis.