Guess whose back, back again with a new payload

The alternitive text gives the answer, but it looks like Bumblebee is back. It exploits MSI exec (written as msiexec) to do its dirty work.

It starts with a zip file, which then includes an LNK file. Th LNK file is normally used as a link to something, but this includes the payload which runs silently.

It mascarades as Midjourney or INVIDIA updates.

It then injects a DLL which silently runs through the aforemententioned msiexec process.

Bumblebee malware returns after recent law enforcement disruption is the article.