Max_Malyutin on Twitter: "#Qakbot TAs keep pushing OneNote (.one) Spam Be aware now TA uses embedded .hta inside the .one for execution🚨 OneNote.exe > mshta.exe > #TTPs Potentially the same can be done by: .cmd.bat|.com|.js|.jse|.lnk|.pif|.vbe|.vbs|.wsf and more... https://t.co/OuS88OTzNu" / Twitter
https://twitter.com/Max_Mal_/status/1621184671403884545