Bleeping Computer

Fake Google Chrome errors trick you into running malicious PowerShell scripts

A new malware distribution campaign uses fake Google Chrome, Word, and OneDrive errors to trick users into running malicious PowerShell "fixes" that install malware. The new campaign was observed ...
CSOonline

Rising ClickFix malware distribution trick puts PowerShell IT policies on notice

IT teams should revisit PowerShell restrictions as an increasingly used click-and-fix technique has users self-serving fake system issues by invoking malicious PowerShell scripts themselves, reducing ...
CSOonline

Beware PowerShell: Too-helpful users tricked into ‘fixing’ their machines with malware

Attackers are using social engineering to get users to copy, paste, and run malicious scripts — all while thinking they are helping out the IT team. It’s bad enough that crooks foist malware on us for ...
Dark Reading

Cut & Paste Tactics Import Malware to Unwitting Victims

Threat actors are using fake browser updates and software fixes to trick users into cutting/copying and pasting PowerShell scripts loaded with various malware strains — including remote access Trojans ...
MCPmag

Windows Zero-Day Flaw Exploits PowerShell

A newly reported zero-day vulnerability (CVE-2019-0859) discovered by Kaspersky Lab this week uses PowerShell to attack Windows systems. CVE-2019-0859 was one of two Windows vulnerabilities -- the ...
Bleeping Computer

Highly-targeted attacks on industrial sector hide payload in images

Attackers looking to steal employee credentials from organizations tied to the industrial sector deployed highly-targeted operations that delivered malicious PowerShell scripts in images. The ...