{"id":25649,"date":"2019-02-26T11:00:13","date_gmt":"2019-02-26T11:00:13","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/"},"modified":"2019-02-26T11:00:13","modified_gmt":"2019-02-26T11:00:13","slug":"who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/","title":{"rendered":"Who needs malware? IBM says most hackers just PowerShell through boxes now, leaving little in the way of footprints"},"content":{"rendered":"<p>A company&#8217;s internal network, once compromised, is now more likely to be ransacked by automated scripts than a piece of malware.<\/p>\n<p>This <a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/newsroom.ibm.com\/2019-02-26-IBM-X-Force-Report-Ransomware-Doesnt-Pay-in-2018-as-Cybercriminals-Turn-to-Cryptojacking-for-Profit\">according to<\/a> researchers with IBM&#8217;s X-Force, who found that in 2018 just 43 per cent of the attacks it analyzed utilized any sort of locally installed files. Rather, the hackers utilized PowerShell scripts to execute their dirty deeds in memory without significantly touching file systems, if at all.<\/p>\n<p>This finding is important because it is another reminder that admins can no longer solely rely on specific file signatures or similar as evidence of a cyber-intrusion. As with local malware infections, the attacker first needs to get the ability to run malicious commands. What differs is the next step, as the miscreant does not direct the infected machine to download, save, and execute a trojan payload.<\/p>\n<p>Rather, the attack runs entirely as commands from PowerShell, where the powerful scripting language can be used to do anything from harvest and steal passwords to mine cryptocurrency.<\/p>\n<p>&#8220;PowerShell is useful in data collection and analysis, but it is also favored by malicious actors who use it to forego the file system and inject malicious code directly into memory, thus enhancing obfuscation, and often evading security controls designed to detect malware deployments,&#8221; the IBM report reads.<\/p>\n<div class=\"promo_article\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2017\/01\/27\/failure.jpg?x=174&amp;y=115&amp;crop=1\" width=\"174\" height=\"115\" alt=\"Failure\"\/><\/p>\n<h2 title=\"Infosec duo worked out how to remotely set their own answers\">Windows 10 security question: How do miscreants use these for post-hack persistence?<\/h2>\n<p><a href=\"https:\/\/www.theregister.co.uk\/2018\/12\/06\/windows_10_security_questions_remotely_defined_answers\/\"><span>READ MORE<\/span><\/a><\/div>\n<p>&#8220;Threat actors of all skill levels have expanded their capabilities using PowerShell over the last few years. IBM X-Force IRIS has seen cases wherein complete malicious toolkits were contained within PowerShell scripts.&#8221;<\/p>\n<p>In some cases, crooks wouldn&#8217;t even need to run a super-leet exploit to steal corporate data. The X-Force report notes that misconfiguration incidents \u2013 instances where databases and storage buckets were left exposed to the public-facing internet \u2013 were also up 20 per cent from last year and accounted for 43 per cent of all of the exposed records X-Force tracked last year.<\/p>\n<p>In addition to the exposed files and records themselves, misconfigurations could also indirectly lead to other attacks when things like passwords and email addresses are involved and used to login to other accounts on other services to carry out further mischief.<\/p>\n<p>Finally, the report found, the tried and true social engineering attack remains as effective as it has ever been.<\/p>\n<p>Last year, IBM found that 29 per cent of the attacks it analyzed were phishing attacks, and 45 per cent of those were targeted attacks on specific employees, something X-Force terms the business email compromise.<\/p>\n<p>&#8220;When it comes to the most lucrative types of social engineering scams, BEC has been a growing tide for several years spanning all industries and geographies,&#8221; notes X-Force.<\/p>\n<p>It seems that, despite the various methods for sophisticated attacks, a bogus &#8220;CEO&#8221; email demanding a wire transfer is still a foolproof way to con a company out of cash. \u00ae<\/p>\n<p class=\"wptl btm\"><span>Sponsored:<\/span> <a href=\"https:\/\/go.theregister.co.uk\/tl\/1810\/-7144\/getting-more-from-less?td=wptl1810\">Getting More From Less<\/a><\/p>\n<p>READ MORE <a href=\"http:\/\/go.theregister.com\/feed\/www.theregister.co.uk\/2019\/02\/26\/malware_ibm_powershell\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Direct-to-memory attacks now account for 57 per cent of hacks, apparently A company&#8217;s internal network, once compromised, is now more likely to be ransacked by automated scripts than a piece of malware.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":25650,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-25649","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Who needs malware? IBM says most hackers just PowerShell through boxes now, leaving little in the way of footprints 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Who needs malware? IBM says most hackers just PowerShell through boxes now, leaving little in the way of footprints 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2019-02-26T11:00:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"174\" \/>\n\t<meta property=\"og:image:height\" content=\"115\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Who needs malware? IBM says most hackers just PowerShell through boxes now, leaving little in the way of footprints\",\"datePublished\":\"2019-02-26T11:00:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\\\/\"},\"wordCount\":496,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/02\\\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\\\/\",\"name\":\"Who needs malware? IBM says most hackers just PowerShell through boxes now, leaving little in the way of footprints 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/02\\\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints.jpg\",\"datePublished\":\"2019-02-26T11:00:13+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/02\\\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/02\\\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints.jpg\",\"width\":174,\"height\":115},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Who needs malware? IBM says most hackers just PowerShell through boxes now, leaving little in the way of footprints\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Who needs malware? IBM says most hackers just PowerShell through boxes now, leaving little in the way of footprints 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/","og_locale":"en_US","og_type":"article","og_title":"Who needs malware? IBM says most hackers just PowerShell through boxes now, leaving little in the way of footprints 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2019-02-26T11:00:13+00:00","og_image":[{"width":174,"height":115,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Who needs malware? IBM says most hackers just PowerShell through boxes now, leaving little in the way of footprints","datePublished":"2019-02-26T11:00:13+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/"},"wordCount":496,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/","url":"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/","name":"Who needs malware? IBM says most hackers just PowerShell through boxes now, leaving little in the way of footprints 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints.jpg","datePublished":"2019-02-26T11:00:13+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints.jpg","width":174,"height":115},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/who-needs-malware-ibm-says-most-hackers-just-powershell-through-boxes-now-leaving-little-in-the-way-of-footprints\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Who needs malware? IBM says most hackers just PowerShell through boxes now, leaving little in the way of footprints"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/25649","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=25649"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/25649\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/25650"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=25649"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=25649"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=25649"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}