Bleeping Computer

Telegram captcha tricks you into running malicious PowerShell scripts

Threat actors on X are exploiting the news around Ross Ulbricht to direct unsuspecting users to a Telegram channel that tricks them into run PowerShell code that infects them with malware. However, ...
CSOonline

Rising ClickFix malware distribution trick puts PowerShell IT policies on notice

IT teams should revisit PowerShell restrictions as an increasingly used click-and-fix technique has users self-serving fake system issues by invoking malicious PowerShell scripts themselves, reducing ...
CSOonline

Beware PowerShell: Too-helpful users tricked into ‘fixing’ their machines with malware

Attackers are using social engineering to get users to copy, paste, and run malicious scripts — all while thinking they are helping out the IT team. It’s bad enough that crooks foist malware on us for ...
Dark Reading

Cut & Paste Tactics Import Malware to Unwitting Victims

Threat actors are using fake browser updates and software fixes to trick users into cutting/copying and pasting PowerShell scripts loaded with various malware strains — including remote access Trojans ...
Bleeping Computer

Highly-targeted attacks on industrial sector hide payload in images

Attackers looking to steal employee credentials from organizations tied to the industrial sector deployed highly-targeted operations that delivered malicious PowerShell scripts in images. The ...
MCPmag

Windows Zero-Day Flaw Exploits PowerShell

A newly reported zero-day vulnerability (CVE-2019-0859) discovered by Kaspersky Lab this week uses PowerShell to attack Windows systems. CVE-2019-0859 was one of two Windows vulnerabilities -- the ...