New ransomware abuses Windows PowerShell, Word document macros

A new ransomware program written in Windows PowerShell is being used in attacks against enterprises, researchers say. The program, dubbed PowerWare, is being distributed via phishing emails with malicious macros. The initial ransom is $500, but it goes up to $1,000 after a couple of weeks. The attackers use the Tor anonymity network to hide their command-and-control server, the researchers said. PowerWare is not the first ransomware implementation in Windows-powered scripting language used in the past.”]

Source: https://www.csoonline.com/article/3048454/new-ransomware-abuses-windows-powershell-word-document-macros.html