Configuration Steps .com

PowerShell’s ‘Invoke-Expression’ cmdlet took a raw response from an internet site and invoked it as though it were PowerShell. Since neither the command nor the internet content that it downloaded were file based, it was also hidden from inspection by traditional antivirus. ................
................