MalwareHunterTeam

@malwrhunterteam · Twitter · 2026-10-23 11:46 UTC

Some possible interesting sample that is obviously not a WinSCP Citrix plugin is coming from here: https://citrixplugins.blob.core\.windows.net/winscp/Windows.Forms.ps1 What do we think? Is it some very targeted malware from actors or possible some redteam/something only? 🤔 🤷‍♂️