VirusTotal VirusTotal

The payload itself is classified as #brutel / #Latrodectus / #BruteRatel :
www.virustotal.com/gui/file/6ab...

From Clipboard to Compromise: A PowerShell Self-Pwn | Proofpoint AU Key findings  Proofpoint researchers identified an increasingly popular technique leveraging unique social engineering to run PowerShell and install malware. Researchers observed TA571 and the Clea...

Finally we also witnessed in the wild one of those #ClearFake / #ClickFix bait delivered per email as reported by Proofpoint in June - ending with a #brutel / #Latrodectus / #BruteRatel
payload www.proofpoint.com/au/blog/thre...