The campaign exploits an Office vulnerability to deliver the modular XWorm RAT, chaining HTA, PowerShell, and in-memory .NET execution to sidestep detection and expand post-compromise control.
What is PowerShell? Microsoft PowerShell is a powerful administrative tool that can help you automate tasks for your computer ...