Johnlery Triunfante

‘Purple Fox’ Malware Can Rootkit and Abuse PowerShell

This new iteration of Purple Fox that we came across, delivered by Rig, has a few new tricks up its sleeve. It retains its rootkit component by abusing publicly available code. It also abuses PowerShell making it capable of fileless infection.

Johnlery Triunfante, Earle Maui Earnshaw, Michael Jhon Ofiaza