nao_sec on Twitter: "Interesting maldoc was submitted from Belarus. It uses Word's external link to load the HTML and then uses the "ms-msdt" scheme to execute PowerShell code. https://t.co/hTdAfHOUx3 https://t.co/rVSb02ZTwt" / Twitter

https://twitter.com/nao_sec/status/1530196847679401984

https://x.com/home/status/1531076050532327424

https://x.com/home/status/1531102025366351872

https://x.com/home/status/1531113887818727430

https://x.com/home/status/1531117892838002688

https://x.com/home/status/1531154837416685568

https://x.com/home/status/1531165416436944897

https://x.com/home/status/1531174367580798976

https://x.com/home/status/1531178691283271680

https://x.com/home/status/1531218383840202752

https://x.com/home/status/1531226952333463552

https://x.com/home/status/1531245422643118081

https://x.com/home/status/1531258189614059521

https://x.com/home/status/1531271962659528706

https://x.com/home/status/1531272839621484545

https://x.com/home/status/1531284058038489090

https://x.com/home/status/1531299554997542914

https://x.com/home/status/1531304830802837504

https://x.com/home/status/1531309831230918656

https://x.com/home/status/1531325111021850630

https://x.com/home/status/1531340108204474368

https://x.com/home/status/1531341102573297665

https://x.com/home/status/1531363255003881474

https://x.com/home/status/1531389104201555968

https://x.com/home/status/1531419921082728453

https://x.com/home/status/1531423531506053122