Florian Roth ⚡ on Twitter: "There is still a high number of #QakBot dropping #OneNote (.one) phishing email attachments with very low AV detection rates Detection opportunity: ONENOTE.EXE spawning mshta.exe https://t.co/hyTuIC40yd https://t.co/yKxOhEdHs6" / Twitter
https://twitter.com/cyb3rops/status/1621864974334189570