Tag: PowerShell malware

NetworkDiagnosticService Task: Check What It Runs

Inspect the NetworkDiagnosticService task’s Actions, file path and origin before deciding whether…

Brendan Smith

OkoBot/TookPS: New C2 and GDrive Backup Sync Task

Gridinsoft Labs identifies 22tuk.digital as a new high-confidence TookPS/OkoBot callback and analyzes…

Dmytro Grydin

PowerShell Opens on Startup or Connects Out: What to Do

If powershell.exe opens at startup or keeps making blocked outbound connections, find…

Daniel Zimmermann

AI Assistant

Hello! 👋 How can I help you today?