Cobalt Strike Operators Leverage PowerShell Loaders Across Chinese, Russian, and Global Infrastructure

A newly discovered PowerShell-based shellcode loader, y1.ps1, leverages advanced in-memory execution and evasion techniques to bypass traditional disk-based detection. The y1.ps1 script was found hosted on an open directory on a Chinese server.