Talos also discovered a new PowerShell command-line argument embedded in the LNK file to bypass anti-virus products and download the final payload int…
First seen on blog.talosintelligence.com
Jump to article: blog.talosintelligence.com/suspected-coralraider-continues-to-expand-victimology-using-three-information-stealers/