New Malicious .slk Files Are Bypassing Microsoft 365 Security and Putting 200 Million Users at Risk

In this attack, hackers send an email with an .slk attachment that contains a malicious macro (MSI exec script) to download and install a remote access trojan.