Vidar Adds Virtual Machine and Custom Stream Ciphers For String Obfuscation

Reported 21 Sep 2026 by otx · Severity: medium

Vidar is an information stealer first observed in 2018 that has continuously evolved its string obfuscation techniques to evade detection and analysis. Between May and September 2026, the malware progressed from basic XOR encryption to ChaCha20-based algorithms, and most recently