• Car@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    2
    ·
    6 months ago

    I would not say

    any self-respecting malware writer will download [powertools] and…

    I’m not as familiar with mass-market malware, but APT-level gear generally doesn’t try to make use of such easily observed events. The more network traffic malware appropriates, the greater the probability that it’s caught.

    Simply put, Powertools puts several functions within arms reach for malware looking to stay under the radar. Without it, malware needs to bring more of its own code which increases footprint. Living off the land exploits in particular love the presence of these kinds of programs