Threat actors exploit HijackLoader because it is a powerful tool for injecting malicious code into legitimate processes, enabling stealthy execution of payloads.  This technique helps them to evade detection by leveraging trusted applications to carry out malicious activities.  This scenario makes it more complicated for security measures to effectively identify and mitigate the threat. Cybersecurity researchers at Crowdsrtike recently discovered a HijackLoader (aka IDAT Loader) that employs sophisticated techniques to evade detection.

Source: GBHackers