Novel Script-Based Attack That Leverages PowerShell And VBScript

A new campaign has been identified as DEEP#GOSU is likely linked to the Kimsuky group, and it employs a new script-based attack chain that uses numerous PowerShell and VBScript stagers to stealthily infect systems.  Its features included data exfiltration, keylogging, clipboard monitoring, dynamic payload execution, and persistence via scheduled activities, self-executing PowerShell scripts using jobs, and RAT software […]

The post Novel Script-Based Attack That Leverages PowerShell And VBScript appeared first on GBHackers on Security | #1 Globally Trusted Cyber …

attack attack chain campaign clipboard cyber-attack cyber security data data exfiltration dynamic exfiltration features infect keylogging kimsuky malware monitoring novel payload persistence powershell script systems vbscript