PowerShell Script Steals Credentials from IIS Config File

Security experts from SecureWorks have identified a series of incidents dating from early August 2016, where they've seen threat actors utilizing malicious PowerShell scripts to steal access credentials stored in IIS configuration files