Huntress 发现一个由 AI 生成的 PowerShell 脚本，用于 AD 侦察，表明攻击者正利用 AI 创建定制化、具备规避能力的工具。 2026 年 6 月 3 日，在一次事件响应调查中，Huntress 分析师 Jevon Ang 从一台被入侵的 Windows Server 中恢复了一个 PowerShell 脚本。攻击者曾使用该脚本绘制受害者 Active Directory 环 ...

The attack vector is available for rent at scale, and evades AV and EDR, leaving YARA analysis as the best detection option.

A likely AI-generated PowerShell script mapped Active Directory after an attacker gained RDP access to a Windows Server with ...

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

Use the following fixes if the SystemSettings.exe is suspended or has stopped interacting with Windows 11: Disable background apps and unwanted services Troubleshot in a Clean Boot state Re-register ...

A fileless malware framework is abusing Google’s Blogspot platform to deliver PureLog Stealer directly into computer memory, sharpening concerns that trusted web services are being turned into staging ...

PureLogs Stealer uses fake PDF JavaScript files and Google's Blogger pages in the VEIL#DROP campaign, enabling fileless ...

Securonix says PureLogs infection starts with a fake PDF JavaScript file and uses PowerShell, fileless .NET loading, and LOLBins.

A fileless malware framework has been abusing Google's Blogspot platform to deliver the PureLog Stealer entirely in memory, letting attackers steal credentials while leaving few traces on disk.

Turns out Windows already gives you all the tools you need to block distracting apps and websites—you just have to put them together.

* Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the ...

throw "Install-AksEeUpgrade.ps1 requires Windows PowerShell 5.1 (Desktop). Detected: $($PSVersionTable.PSEdition) $($PSVersionTable.PSVersion). Re-run with ...