60,826 News Articles

Proof-of-concept worm targets PowerShell

Scripting technology could be exploited

Microsoft has not released its PowerShell scripting technology in commercial products yet, but a group of hackers has already written a prototype virus for it.

According to security company McAfee, MSH/Cibyz!p2p is a proof-of-concept worm written in Windows PowerShell script that attempts to spread via the P2P (peer-to-peer) application KaZaa by dropping a copy of itself in its shared folders.

Windows PowerShell is a command-line shell and task-based scripting technology that provides control and automation of system administration tasks, according to information on Microsoft's website. It also includes a scripting language that enables automation of Windows system administration tasks.

Forthcoming products Exchange Server 2007 and System Center Operations Manager 2007 will be built on Windows PowerShell, Microsoft said.

McAfee has rated the both the home- and corporate-user risk for the worm prototype as 'low'. More information about the worm prototype can be found on McAfee's site.

Send to a friend

Email this article to a friend or colleague:


PLEASE NOTE: Your name is used only to let the recipient know who sent the story. Both your name and the recipient's name and address will not be used for any other purpose.