SmartApeSG - CDN Compromised Script Load & Mshta
Detects the loading of a compromised JavaScript file from a CDN (cdn-static.okendo.io/reviews-widget-plus/js/okendo-reviews.js) followed by the execution of mshta.exe on the same device within a 10-minute timeframe, indicating a potential supply chain attack by SmartApeSG.
Microsoft Sentinel (KQL)
