Stella_Gary Backdoor: PowerShell Beacon via Fake Chrome Update Task

Ibrahim Saud@tektrix

•updated 22 days ago•0•0•5

Detects instances where PowerShell is executed with a command line string containing 'Google Chrome Update' and initiates a network connection. This behavior is indicative of a malicious process masquerading as a legitimate browser update mechanism to hide network activity.