PS1Bot: Multi-Stage Malware Framework Targeting Windows Systems

New Malvertising Attack Spreads Crypto Stealing PS1Bot Malware

PS1Bot malware steals crypto wallets, passwords and sensitive data, spreading via malvertising while evading detection with in-memory execution.

Multi-Stage Malware Framework Targeting Windows Systems - Cybernoz - Cybersecurity News

Cisco Talos researchers have uncovered an aggressive malware campaign active since early 2025, deploying a sophisticated multi-stage framework dubbed PS1Bot, primarily implemented in PowerShell and C#. This threat actor leverages malvertising and SEO poisoning to distribute compressed archives with file names mimicking legitimate search queries, such as “chapter 8 medicare benefit policy manual.zip” or “pambu panchangam 2024-25 pdf.zip.” Upon ex…

PS1Bot: Multi-Stage Malware Framework Targeting Windows Systems

Cisco Talos researchers have uncovered an aggressive malware campaign active since early 2025, deploying a sophisticated multi-stage framework dubbed PS1Bot, primarily implemented in PowerShell and C#. This threat actor leverages malvertising and SEO poisoning to distribute compressed archives with file names mimicking legitimate search queries, such as “chapter 8 medicare benefit policy manual.zip” or “pambu […] The post PS1Bot: Multi-Stage Mal…