Latest PowerShell news

Malware Retrieves PowerShell Scripts from DNS Records

Malware researchers have come across a new Remote Access Trojan (RAT) that uses a novel technique to evade detection on corporate networks by fetching malicious PowerShell commands stored inside a domain's DNS TXT records.
- Catalin Cimpanu
- March 03, 2017
- 09:50 AM
- 2
Crooks Start Deploying New "August" Infostealer

During the month of November 2016, a cyber-crime group has started deploying a new malware family nicknamed "August," used mainly for information gathering and reconnaissance on the infected target's computer.
- Catalin Cimpanu
- December 08, 2016
- 10:11 AM
- 0
The Week in Ransomware - December 2nd 2016 - Screenlockers, Kangaroo, the SFMTA, and More!

Lots of small ransomware infections / screenlockers this week, but no major infections were discovered. Thankfully, security researchers were able to create a bunch of decryptors and make them available for victim's to recover their files. Of particular note was the San Francisco MTA getting hit hard by the HDDCryptor ransomware.
- Lawrence Abrams
- December 02, 2016
- 05:18 PM
- 0
Microsoft Researchers Release Anti-Reconnaissance Tool Named SAMRi10

Microsoft researchers Itai Grady and Tal Be'ery released today a new tool designed to help system administrators protect enterprise networks from reconnaissance attacks.
- Catalin Cimpanu
- December 01, 2016
- 07:20 AM
- 0
Windows 10 Insider Build 14971 includes Paint 3D and makes PowerShell the default Command Shell

Today Microsoft has released the Windows 10 Insider Preview Build 14971 for PC to Insiders on the fast ring. This release adds the ability to read EPUB book in Microsoft Edge, includes the Paint 3D application, and makes the PowerShell the default shell from file explorer and the Win+X Menu.
- Lawrence Abrams
- November 17, 2016
- 05:00 PM
- 1
The Week in Ransomware - July 22 2016 - Stampado, Bart, HolyCrypt, and More

This week we have 3 new ransomware variants, 2 new ransomware infections, and 4 new ransomware decryptors. Stampado finally popped its head out of its hole, but was quickly squashed and a slew of new decryptors were released. Overall, a good week for the good guys.
- Lawrence Abrams
- July 23, 2016
- 01:09 PM
- 1
Shoddy Programming causes new Ransomware to destroy your Data

It is bad enough when a ransomware infection encrypts your data and demands a ransom, but it's even worse when shoddy programming destroys it instead. This is what happened in a new variant of the Power Worm ransomware where bad programming encrypts your data using AES encryption and then throws away the key
- Lawrence Abrams
- October 30, 2015
- 02:55 PM
- 6