DNS TXT Records Exploited In ClickFix Script For Remote PowerShell Command Execution
Cyber threats evolve fast, and attackers now hide commands in plain sight using everyday DNS features. A new campaign called KongTuke has surfaced, abusing...
BlindEagle Leveraging PowerShell to Infiltrate Government Infrastructure
Zscaler’s ThreatLabz team has uncovered a new spear-phishing campaign launched by BlindEagle, a South American-based cyber espionage group known for targeting institutions in Spanish-speaking...
MastaStealer Abuses Windows LNK Files to Run PowerShell and Bypass Defender
Researchers have identified a new MastaStealer campaign that leverages Windows shortcut (LNK) files to execute malicious PowerShell commands and deploy a C2 beacon on...
New Yurei Ransomware Variant Discovered Utilizing PowerShell Automation and ChaCha20 Cipher
A newly identified ransomware group, named Yurei, has emerged on the cybercrime landscape, with its first reported victim on September 5.
According to Check...
PowerShell Loaders Leverage In-Memory Techniques to Bypass Disk-Based Security Detection
Security researchers have uncovered a new wave of PowerShell-based malware loaders using in-memory execution techniques to evade disk-based security defenses.
The operation, first traced...