Cyberattacks have become increasingly stealthy in recent years, with goals like persistence and lateral movement becoming much more important to threat actors than ever before. Now it appears that some attacks have gotten so stealthy they are almost invisible. Kaspersky Lab issued an alert about a series of targeted attacks on organizations in 40 countries. The attacks involve the use of file-less Meterpreter, a widely used penetration-testing tool, along with Windows PowerShell and other utilities used commonly by systems administrators. The attackers are still active and detecting these attacks is possible only in RAM, the network and registry.”]

