The activity begins with the attackers distributing malicious VBS files via WhatsApp messages that, when executed, create ...