New #qakbot killchain
Malicious email --> zip file --> Onenote file --> hta file
https://any.run/report/07800a51fd54dc36d00546c1ec3141eeb23e5e393b80cb8aa8c5a1ae061c2275/ccc08ca0-0bfe-493d-9e27-d536b74288a3#Static%20information
Why is this step necessary? mastodon.bida.im might not be the server where you are registered, so we need to redirect you to your home server first. Don't have an account? You can sign up here
mastodon.bida.im