Trustconnect Powershell Download Cradle

nomit vyas@xoxo

•updated Feb 19, 2026•3•0•72

Detects PowerShell one-liners using Invoke-RestMethod (irm) or Invoke-WebRequest (iwr) piped to Invoke-Expression (iex) to download and execute the TrustConnect or DocConnect RAT.