Vice Society Ransomware Using Stealthy PowerShell Tool for Data Exfiltration
Vice Society Ransomware Using Stealthy PowerShell Tool for Data Exfiltration
17 April 2023
Threat actors associated with the Vice Society ransomware gang have been observed using a bespoke PowerShell-based tool to fly under the radar and automate the process of exfiltrating data from compromised networks.
"Threat actors (TAs) using built-in data exfiltration methods like [living off the land binaries and scripts] negate the need to bring in external tools that might be flagged by