Adrian Shuai Li

PhantomCall: Evading ML Malware Detectors via Function Call Graph Perturbation

Phan- tomCall is presented, a black-box attack that perturbs the FCG of Windows PE malware by injecting fully executable dummy functions at targeted call sites, adding new nodes and edges to both the CFG and FCG while preserving program semantics.