Cryptolaemus on Twitter: "#emotet TTPs changed Initial XLS now grabs the HTA > PP.PNG > PS with payloads the HTA url is obscured, https://t.co/qwK6y0DDqo https://t.co/VJSKCDQqhV" / Twitter
https://twitter.com/Cryptolaemus1/status/1483190427213783044