Xloader Malware Delivered via Sophisticated SharePoint Attack

The attack started with an email posing as a SharePoint message, featuring a fake “Open Files” button. This link redirected users to a malicious Zip file hosted outside SharePoint. The file contained a binary, leading to further malicious activity.