Group uses updated PowerShell version of its GammaSteel malware in attack.