#PowerShell
This archive brings together reporting on PowerShell in offensive and defensive operations, with emphasis on automation, lateral movement, evasion, and incident response. It also covers campaign analysis, abuse of built-in Windows tools, and guidance for security teams across Latin America.
Casbaneiro: Two Campaigns and an Active C2
Unit 42 tracked two Casbaneiro activity lines, including an abused remote access tool, Delphi side-loading and a malicious Chromium extension.
Nov 2, 2026 · 41 min
Colombia phishing uses fake court notices
A phishing campaign targets organizations in Colombia with fake court notices in Spanish and delivers XWorm through scripts.
Oct 29, 2026 · 2 min