PhantomCall: Evading ML Malware Detectors via Function Call Graph Perturbation
Phan- tomCall is presented, a black-box attack that perturbs the FCG of Windows PE malware by injecting fully executable dummy functions at targeted call sites, adding new nodes and edges to both the CFG and FCG while preserving program semantics.