Unless you're using publicly available malware that is known to be used for crime, AV isn't going to detect anything. That's how it works, and that's how it has to work.
I haven'y fully read through the paper, but it doesn't look much different than what attackers have been doing with compiled AutoIT binaries for decades.
If it's on Github I'd be interested in looking at the code. If not it seems like just another academic paper misunderstanding the real problems faced by both attackers and defenders.
I haven'y fully read through the paper, but it doesn't look much different than what attackers have been doing with compiled AutoIT binaries for decades.
If it's on Github I'd be interested in looking at the code. If not it seems like just another academic paper misunderstanding the real problems faced by both attackers and defenders.