POWERTON

Internal ID: ps1.powerton

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family identifying ps1.powerton. Origin and technical characteristics tracked via Malpedia.

Threat Analysis

POWERTON is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→https://blog.telsy.com/meeting-powerband-the-apt33-net-powerton-variant/

→https://norfolkinfosec.com/apt33-powershell-malware/

→https://www.fireeye.com/blog/threat-research/2018/12/overruled-containing-a-potentially-destructive-adversary.html

→https://www.fireeye.com/blog/threat-research/2020/07/scandalous-external-detection-using-network-scan-data-and-automation.html

→https://www.microsoft.com/security/blog/2020/06/18/inside-microsoft-threat-protection-mapping-attack-chains-from-cloud-to-endpoint/

→https://www.secureworks.com/research/threat-profiles/cobalt-trinity

→https://www.symantec.com/security-center/writeup/2019-062513-4935-99

Quick Facts

TypeMalware Family

Aliases1

Also Known As

ps1.powerton

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search POWERTON