Description
PowerTool is a hack tool that bundles kernel mode drivers to bypass access controls, kill processes, and modify protected files and registry keys. Cyberattackers use it to disable security software and establish deep persistence, so detections indicate active tampering on the affected host.
Stats
- First seen
- January 2023
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Application.PowerTool.1 |
| Win32.Trojan.PowerTool |