April 13, 2023, 1 p.m. | Ryan Chapman

Unit42 unit42.paloaltonetworks.com

The Vice Society ransomware gang exfiltrated victim network data using a custom Microsoft PowerShell script. We dissect how each function of it works.


The post Vice Society: A Tale of Victim Data Exfiltration via PowerShell, aka Stealing off the Land appeared first on Unit 42.

cortex xdr data data exfiltration exfiltration function microsoft network powershell powershell script powershell scripts ransomware ransomware gang script society stealing unit 42 vice society vice society ransomware victim

More from unit42.paloaltonetworks.com / Unit42

Security Analyst

@ Northwestern Memorial Healthcare | Chicago, IL, United States

GRC Analyst

@ Richemont | Shelton, CT, US

Security Specialist

@ Peraton | Government Site, MD, United States

Information Assurance Security Specialist (IASS)

@ OBXtek Inc. | United States

Cyber Security Technology Analyst

@ Airbus | Bengaluru (Airbus)

Vice President, Cyber Operations Engineer

@ BlackRock | LO9-London - Drapers Gardens