Re: Word and Excel Files Infected Using Windows PowerShell - http://blog.trendmicro.com/trendla...
Mar 28, 2014
from
"PowerShell's just a handy tool -- if it had failed to execute the Powershell, that C&C server probably had a .vbs script as a backup option ;)"
- Joel Bennett