"It uses PowerShell scripts to download a copy of Snake Keylogger to the infected system and execute it." This is probably also the case in the recent rash of infections. Among other steps for ...