Disney reportedly ditching Slack after breach

Attackers hijack legitimate commands and run malicious code to launch supply chain attacks.

Threat actors leveraged social engineering techniques to lure targets into executing a malicious MSI installer-spoofing LNK file that would run an obfuscated script, which ensures persistence and downloads the VSCode command-line interface in the absence of VSCode to enable file access and additional compromise.