LONEPAGE hidden PowerShell dropping VBScript with frequent schtasks and upgrade.

Arnold Chan@slaz

•updated yesterday•1•0•4

Detects a behavioral chain where PowerShell stages a hidden base64-encoded command and schedules a VBScript task, or PowerShell fetches an upgrade.txt file via web client methods for execution.