Skip to content
MalwareWiki

Malware

POWERSOURCE

POWERSOURCE is a heavily obfuscated and modified version of the publicly available tool DNS_TXT_Pwnage.

POWERSOURCE is a PowerShell malware family operated by Anunak.

Background

POWERSOURCE is a heavily obfuscated, altered derivative of the openly available DNS_TXT_Pwnage tool. This backdoor relies on DNS TXT queries for its command-and-control channel and persists either in the registry or within Alternate Data Streams.

Source: Malpedia (Fraunhofer FKIE).