Risk hunters are alerting to a brand new marketing campaign that employs misleading web sites to trick unsuspecting customers into executing malicious PowerShell scripts on their machines and infect them with the NetSupport RAT malware.
The DomainTools Investigations (DTI) group mentioned it recognized “malicious multi-stage downloader Powershell scripts” hosted on lure web sites that masquerade as Gitcode and DocuSign.
”
Pretend DocuSign, Gitcode Websites Unfold NetSupport RAT through Multi-Stage PowerShell Assault
