Keep your eyes on these

VERY IMPORTANT

Security Articles

RSS

A dive into Turla PowerShell usage

released on 2019-05-29 @ 10:49:49 AM
Turla, also known as Snake, is an infamous espionage group recognized for its complex malware. To confound detection, its operators recently started using PowerShell scripts that provide direct, in-memory loading and execution of malware executables and libraries. This allows them to bypass detection that can trigger when a malicious executable is dropped on disk.