Anatomy of a LinkedIn Job Scam: A 167 MB DLL-Sideloading Loader Behind Google Forms
·8796 words·42 mins
How a LinkedIn DM led to a 167 MB archive built around a genuinely Microsoft-signed WinWord.exe, a DLL-sideloading hijack, and 137 MB of encrypted payload.