BATLoader Lurks Under PowerShell Script to Evade Detection, Launch

The researchers were able to notice the difference in the method, and how the malicious payload was being delivered using BATLoader.

TruKno Real-World Threat Intelligence

Modifying Empire to Evade Windows Defender :: Mike Gualtieri

BatLoader campaign impersonates ChatGPT and Midjourney to deliver Redline Stealer

Windows Red Team Defense Evasion Techniques

the powershell script is detectable. · Issue #154 · trustedsec/unicorn · GitHub

𝗧𝗵𝗲 𝗖𝘆𝗯𝗲𝗿 𝗘𝘅𝗽𝗿𝗲𝘀𝘀, 𝗗𝗮𝗶𝗹𝘆 #𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 #𝗻𝗲𝘄𝘀

Evade Windows Defender PowerShell Empire agent detection, by Nol White Hat

TruKno Real-World Threat Intelligence

Modifying Empire to Evade Windows Defender :: Mike Gualtieri

Web Filtering Blog