UNC1069-style AI Lure Archive Launching Executable
Archive or browser/Office recently opened then child process is executable from user temp or downloads. AI/crypto social engineering campaigns often use ZIP with double-extension executables.
Sigma
Archive or browser/Office recently opened then child process is executable from user temp or downloads. AI/crypto social engineering campaigns often use ZIP with double-extension executables.
Already have an account?