3 ms·
As a "corporate" sysadmin using Powershell everyday, I was always surprised that PS is not so used in the malware industry. By the way, I find that this articl
by nacos 10y ago
As a "corporate" sysadmin using Powershell everyday, I was always surprised that PS is not so used in the malware industry.
By the way, I find that this article[0] linked in the original post is much more interesting if you want to know more about how brazilian malwares work (BHO injection, 2FA bypass, etc.)
[0] https://securelist.com/blog/research/74325/the-evolution-of-brazilian-malware/ https://securelist.com/blog/research/74325/the-evolution-of-...
- user5994461 10y agoIt took a while for powershell to be installed on most computers. It's still certainly missing on many computers (i.e. the oldest and most vulnerable). I actually don't know whether it is installed as default in the latest Microsoft OS and patches. That and the very easy way to analyse/reverse engineer scripts don't make a great candidate for malware. Anyway, the windows shell is enough for trivial scripts, and one might as well write software in a real programming language for the rest.
- contextfree 10y agoIt's been installed by default since Windows 7 and PS v2. The only version that wasn't installed by default with a Windows release was PS v1 (introduced at the same time as Vista).