Description
PowerWare is a PowerShell based ransomware family observed in extortive campaigns in 2016. Its script based design reflects the mid 2010s shift toward running malware through legitimate interpreters rather than executable files.
Stats
- First seen
- July 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Generic.JS.PowerWare.1043529F |
| Generic.JS.PowerWare.78A0BC9B |
| Generic.JS.PowerWare.D26EFCC0 |
| Generic.JS.PowerWare.E2266337 |
| Generic.JS.PowerWare.EEBF2D8B |
| Script-JS.Ransomware.PowerWare |
| Script-PowerShell.Ransomware.PowerWare |