Cybercriminals Using PowerShell to Steal NTLMv2 Hashes from Compromised Windows

News and information from the Advent IM team.

A new cyber attack campaign is leveraging the PowerShell script associated with a legitimate red teaming tool to plunder NTLMv2 hashes from compromised Windows systems primarily located in Australia, Poland, and Belgium.

Read via The Hacker News.

Share this Post