This slideshow outlines 10 reasons why hackers use PowerShell to turn an operating system against itself and compromise entire networks without needing to install a single piece of software.

1. PowerShell
10 reasons why it’s scary

2. #10
PowerShell is
installed by
default on all
new Windows
computers.

3. #9
It can execute
payloads
directly from
memory, making
it stealthy.

4. #8
It generates few
traces by default,
making it
difficult to find
under forensic
analysis.

5. #7
PowerShell has remote
access capabilities by
default with encrypted
traffic.

6. #6
As a script, it is
easy to obfuscate
and difficult to
detect with
traditional
security tools.

7. #5
PowerShell can
bypass application-
whitelisting tools
depending on the
configuration.

8. #4
Many gateway sandboxes do
not handle script-based
malware well.

9. #3
It has a growing
community with
ready available
scripts.

10. #2
Many system admins
use and trust the
framework, allowing
PowerShell malware
to blend in with
regular
administration work.

11. #1
Defenders often
overlook it
when hardening
their systems.

12. Fileless Malware: An Evolving Threat on the Horizon
In order to better protect your environment, it is
critical to understand how attackers are manipulating
these tools, and using them to gain access and create
a launching pad for their malicious operation…
more