PowerLess
- ID
- S1012
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 17 Apr 2025
PowerLess is a PowerShell-based modular backdoor that has been used by Magic Hound since at least 2022.[1]
Techniques used (9)
- T1005 Data from Local System
- T1056.001 Keylogging
- T1059.001 PowerShell
- T1074.001 Local Data Staging
- T1105 Ingress Tool Transfer
- T1140 Deobfuscate/Decode Files or Information
- T1217 Browser Information Discovery
- T1560 Archive Collected Data
- T1573 Encrypted Channel
