Undetected PowerShell Backdoor Disguised as a Profile File, (Fri, Jun 9th)

PowerShell remains an excellent way to compromise computers. Many PowerShell scripts found in the wild are usually obfuscated. Most of the time, this helps to have the script detected by fewer antivirus vendors. Yesterday, I found a script that scored 0/59 on VT! Let’s have a look at it.

Article Link: https://isc.sans.edu/diary/rss/29930

1 post - 1 participant

Read full topic

antivirus backdoor compromise computers file obfuscated powershell powershell backdoor powershell scripts profile script scripts undetected vendors