PowerShortShell
- First seen
- 2018-05-01 00:00:00
- Malware type
- backdoor, trojan
- Family
- Malware family
- Profile updated
- 2026-07-07 14:38:58
Targeted industries: government-and-public-sector technology-and-telecommunications
Targeted regions: country_code:us country_code:cn
Context
PowerShortShell is a stealthy PowerShell-based backdoor used for post-exploitation activities. It is known for targeting government and technology sectors with capabilities to execute complex commands and maintain persistent access.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Ps1.Powershortshell (report)
- safebreach.com — New Powershortshell Stealer Exploits Recent Microsoft Mshtml Vulnerability To Spy On Farsi Speakers (report)