Smart PowerWare Ransomware Uses PowerShell for the Dirty Work

A new ransomware program written in Windows PowerShell is being used in attacks against enterprises, especially healthcare organizations.

The ransomware, dubbed PowerWare, is being distributed to victims via phishing emails containing Word documents with malicious macros, an increasingly common attack technique. The phishing attack is being disguised as an “invoice.”

According to Carbon Black, PowerWare targets organizations via Microsoft Word and PowerShell. PowerShell is the scripting language inherent to Microsoft operating systems.