Bleeping Computer

ViperSoftX malware covertly runs PowerShell using AutoIT scripting

The latest variants of the ViperSoftX info-stealing malware use the common language runtime (CLR) to load and execute PowerShell commands within AutoIt scripts to evade detection. CLR is a key ...
Computer Weekly

Turla APT group beefs up cyber attack tool

New PowerShell-based tools used by the Turla cyber espionage group improve the group’s persistence and stealth capabilities, according to researchers at cyber security firm Eset. Turla, also known as ...
Bleeping Computer

NSA shares tips on securing Windows devices with PowerShell

The National Security Agency (NSA) and cybersecurity partner agencies issued an advisory today recommending system administrators to use PowerShell to prevent and detect malicious activity on Windows ...
Redmond Magazine

Q&A: PowerShell for Everyone

PowerShell has long been a cornerstone of IT automation, but for many professionals -- especially those just starting out -- it can seem intimidating. At this year's TechMentor conference (taking ...
CSOonline

How to log and monitor PowerShell activity for suspicious scripts and commands

Attackers are increasingly abusing sanctioned tools to subvert automated defenses. Tracking your Windows fleet’s PowerShell use — especially consultant workstations — can provide early indications of ...