Suspected CoralRaider continues to expand victimology using three information stealers

Talos also discovered a new PowerShell command-line argument embedded in the LNK file to bypass anti-virus products and download the final payload into the victims’ host.

apt argument bypass command download embedded file host information information stealers line lnk lnk file payload powershell products stealers talos threats threat spotlight virus