powerkatz

First seen
2015-08-01 00:00:00
Malware type
credential-stealer
Family
Malware family
Profile updated
2026-07-07 15:09:24

Targeted industries: government-and-public-sector financial-services technology-and-telecommunications

Context

PowerKatz is a PowerShell-based variant of Mimikatz used for extracting credentials. It leverages Windows processes to access sensitive information, primarily targeting government and financial sectors.

Reports & references

  • blog.yoroi.company — The Arsenal Behind The Australian Parliament Hack (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Powerkatz (report)

External references