#PowerShellEmpire

Malware/Tool

2019-01-10 • Big Game Hunting with Ryuk: Another Lucrative Targeted Ransomware

A PowerShell-based post-exploitation framework installed as a service during WIZARD SPIDER intrusions that culminated in Ryuk deployment. TrickBot infrastructure also tunneled Empire traffic for reconnaissance and lateral movement.

Tagged Reports

« Back