The campaign exploits an Office vulnerability to deliver the modular XWorm RAT, chaining HTA, PowerShell, and in-memory .NET execution to sidestep detection and expand post-compromise control.
Enable the Linux terminal on any Android device, and you can create or practice your bash scripting on the go.