MixShell Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

April 16, 2026

Last Seen

April 16, 2026

Related Threat Clusters

PowMix Botnet Targets Czech Organizations with Malicious LNK Files
The PowMix botnet has been identified as targeting Czech organizations since at least December 2025. Attackers use malicious LNK files to initiate a PowerShell loader that extracts a ZIP archive, bypasses AMSI…

3 articles · Updated April 17, 2026

Recent Intelligence Reports

PowMix botnet targets Czech workforce — Blog.Talosintelligence · April 16, 2026

Related Entities

Botnet Malware Phishing ZipLine Campaign PowMix T1053.005 - Scheduled Task T1059.001 - PowerShell T1071.001 - Web Protocols T1562.001 - Disable Or Modify Tools T1566.001 - Spearphishing Attachment Windows PowerShell