TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data
More on PowerShell
Other advisories
- HighCVE-2026-119025open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows
- Not ratedosv:CLEANSTART-2024-OM32175constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell
- Not ratedosv:CVE-2026-119025open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows
- HighCVE-2026-116627Devolutions PowerShell Universal: Cross-Site-Scripting (XSS)
- HighCVE-2026-116627Devolutions PowerShell Universal: Cross-Site-Scripting (XSS)
- HighCVE-2026-96251Microsoft PowerShell Remote Code Execution Vulnerability
- MediumCVE-2026-96303Microsoft PowerShell Security Feature Bypass Vulnerability
- HighCVE-2026-119025npm open PowerShell injection (CVE-2026-119025): malicious MCP servers can run code on Windows/WSL via OpenCode and MCP Inspector sign-in
Other news entries
- 10 ways attackers abuse AI services to hack your businessNewsCSO Online
- Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python PackagesNewsSecurityWeek
- Microsoft Entwicklerwerkzeuge: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Microsoft Entwicklerwerkzeuge: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Hackers Use ChatGPT Custom GPTs in ClickFix AttacksNewsSecurityWeek
- Placeholder domain used in dev docs now serves ClickFix attacksNewsBleepingComputer
- Fake Cloudflare CAPTCHA tricks victims into opening a tunnel for attackersNewsCSO Online
- 'TerminalFix' Campaign Weaponizes PowerShell for Enterprise AttacksNewsDark Reading
Source: https://thehackernews.com/2026/09/taskstomp-powershell-backdoor-steals.html
ID