PowerShell data exfiltration tool being used by a ransomware gang for stealthy data

Vice Society is a ransomware gang known to use ransomware binaries on the criminal underground to meet its goals.

In December 2022, it was discovered they were using a PowerShell-based tool to automate the process of exfiltrating data from compromised networks.

This tool works by identifying mounted drives, searching through root directories, and exfiltrating data over HTTP while filtering out system files, backups, and folders related to web browsers and security solutions.

This discovery serves as a reminder to organizations to prioritize security protections and stay vigilant against evolving threats.

#shorts #techshorts #technews #tech #technology #exfiltrating data #threat actor #PowerShell script

👋 Feeling the vibes?

Keep the good energy going by checking out my Amazon affiliate link for some cool finds! 🛍️

If not, consider contributing to my caffeine supply at Buy Me a Coffee ☕️.

Your clicks = cosmic support for more awesome content! 🚀🌈