OneNote Embedded URL Abuse

Whilst Microsoft is fixing the embedded files feature in OneNote I decided to abuse a whole other feature. Embedded URLs. Turns out this is something they may also have to fix.

abuse blue team credential harvesting cyber threats embedded files fix maldoc malware may microsoft onenote phishing phsihing qbot soc threat hunting threathunting url urls