OneDrive Phishing Scam Tricks Users into Running Malicious PowerShell Script

This campaign heavily relies on social engineering tactics to deceive users into executing a PowerShell script, compromising their systems.

The phishing campaign named OneDrive Pastejacking tricks users through an email with fake OneDrive messages, leading them to execute harmful PowerShell commands.

The campaign involves a sophisticated series of steps, including running ipconfig /flushdns, creating a folder, downloading an archive file, and executing a script.a3x using AutoIt3.exe.

Read at The Hacker News