The Dark Side of Clickbait: How Fake Video Links Deliver Malware

**McAfee Labs observed a surge in phishing campaigns that lure users with fake "viral video" links, redirect victims across multiple malicious domains and ad-laden pages, and ultimately deliver a password-protected archive containing an MSI installer; the report documents execution actions (files dropped to %Roaming%), PowerShell obfuscation, process activity, detection coverage, and provides SHA256 hashes and redirecting URLs as IoCs.**