Info Security Magazine
1 week, 2 days ago
Vibe-Coded Malware Caught in Active Directory Attack
Huntress found a threat actor using vibe-coded PowerShell to map an Active Directory network
Security news aggregator
Latest coverage for PowerShell
PowerShell is Microsoft's task-automation shell and scripting platform, whose capabilities affect endpoint administration, abuse, and security controls.
18
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
PowerShell is a command-line shell and scripting language for automating administration and configuration. It began as a Windows technology and is also available on Linux and macOS; its security-relevant features include access to operating-system APIs, scripting, and remote management. Administrators and defenders use it for tasks such as configuration enforcement, log analysis, and investigation.
Because PowerShell can download, decode, and execute scripts and use trusted administrative interfaces, attackers may abuse it for execution, persistence, credential access, or lateral movement, especially after obtaining valid permissions. PowerShell itself is not inherently malicious or a universal antivirus bypass. Useful controls include applying updates to the relevant PowerShell edition and its runtime, limiting script and remoting privileges, and enabling detailed logging such as script-block and transcription logs. Security teams can correlate those records with process, authentication, and network telemetry; controls such as application allowlisting and constrained language mode can further reduce abuse, while preserving required administrative workflows.
Volume over time
Weekly headline count for the current query.
Showing 18 most recent headlines
Filtered view
Info Security Magazine
1 month, 3 weeks ago
PureLogs Variant Steals Data via Purchase Order Lures
FortiGuard Labs detailed a PureLogs campaign using JavaScript, PowerShell and process hollowing
Info Security Magazine
2 months, 1 week ago
Fake Claude Code Page Pushes PowerShell Stealer at Devs
Ontinue uncovers fake Claude Code installer pushing PowerShell stealer abusing Chrome's IElevator2
Info Security Magazine
3 months, 2 weeks ago
GitHub Used as Covert Channel in Multi-Stage Malware Campaign
LNK files use GitHub C2, embedded decoders and PowerShell for persistence and data exfiltration
Info Security Magazine
9 months, 2 weeks ago
Shortcut-based Credential Lures Deliver DLL Implants
A new campaign has been observed using malicious Windows shortcuts in credential-themed ZIP files to deploy PowerShell script
Info Security Magazine
10 months ago
FileFix Campaign Using Steganography and Multistage Payloads
FileFix campaign hides PowerShell script and encrypted EXEs in JPGs via multilingual phishing
Info Security Magazine
11 months ago
USB Malware Campaign Spreads Cryptominer Worldwide
A multi-stage attack delivered via USB devices has been observed installing cryptomining malware using DLL hijacking and PowerShell
Info Security Magazine
11 months ago
Malvertising Campaign Deploys Modular PowerShell Malware PS1Bot
An ongoing malware campaign has been observed using malvertising to deliver PS1Bot, a PowerShell-based framework
Info Security Magazine
1 year, 2 months ago
PowerShell-Based Loader Deploys Remcos RAT in New Fileless Attack
A stealthy fileless PowerShell attack using Remcos RAT bypassed antivirus by operating in memory
Info Security Magazine
1 year, 3 months ago
Attackers Use Fake CAPTCHAs to Deploy Lumma Stealer RAT
Attackers are exploiting user familiarity with CAPTCHAs to distribute the Lumma Stealer RAT via malicious PowerShell commands, according to HP
Info Security Magazine
1 year, 10 months ago
LummaC2 Infostealer Resurfaces With Obfuscated PowerShell Tactics
LummaC2, a C-based MaaS tool first identified in 2022, has resurfaced to exfiltrate credentials and personal data
Info Security Magazine
1 year, 10 months ago
Iranian Group TA453 Launches Phishing Attacks with BlackSmith
TA453, also known as Charming Kitten, launched a targeted phishing attack using PowerShell malware BlackSmith
Info Security Magazine
1 year, 11 months ago
Sophisticated Phishing Campaign Targets Microsoft OneDrive Users
The OneDrive campaign uses social engineering to trick users into executing a PowerShell script
Info Security Magazine
1 year, 11 months ago
Walmart Discovers New PowerShell Backdoor Linked to Zloader Malware
Walmart detailed findings about an unknown PowerShell backdoor, which was potentially utilized alongside a new Zloader variant
Info Security Magazine
2 years, 3 months ago
Rhadamanthys Malware Deployed By TA547 Against German Targets
Proofpoint said it is the first time this threat actor has been seen using LLM-generated PowerShell scripts
Info Security Magazine
2 years, 11 months ago
Critical Flaws in PowerShell Gallery Enable Malicious Exploits
Aqua Nautilus exposed naming policy, ownership verification and module exposure vulnerabilities
Info Security Magazine
3 years, 1 month ago
"PowerDrop" PowerShell Malware Targets US Aerospace Industry
Adlumin said the malware combines elements of off-the-shelf threats and APT tactics
Info Security Magazine
3 years, 11 months ago
LockBit Ransomware Exploits Windows Defender to Sideload Cobalt Strike Payload
The attackers modified the Blast Secure Gateway component of the application using PowerShell code