How to Deal With a PowerShell Backdoor

Johannes: We have a write-up by Xavier about PowerShell backdoor. The script itself connects to a command control server. It does a retrieve cryptographic material, then from the command control server and lately connects to receive additional commands. A Gee has a summary of what his honeypot detected last month.