Fake offer of products from Türkiye bait for a mysterious malware. The compressed attachment of the email “Alıntı 2589984” contains a lnk file, which starts the chain of infection by running a Powershell script

A fake offer of products from Türkiye carries a mysterious malware.

The compressed attachment of the “Alıntı 2589984” email contains a lnk file, which starts the chain of infection by running a Powershell script. At the moment, however, it is not clear what type of malware infects the victim’s computer. There are no certain confirmations, but it could be AgentTesla, delivered via Quantum Builder.