The Lost Payload: MSIX Resurrection | Splunk

Threat actors are exploiting the trusted MSIX packaging format to deliver stealthy malware at scale, bypassing security controls and fueling a Loader-as-a-Service marketplace, while new defensive tools like MSIXBuilder are essential for safely testing and detecting these evolving attacks.