VBScript and PowerShell

LevelBlue Publishes IOCs on Fileless AsyncRAT Attack Exploiting ScreenConnect

The technical breakdown equips defenders to detect an in-memory, multi-stage chain that persists via a fake Skype Updater task.