New Trickbot and BazarLoader delivery vectors

Zscaler ThreatLabz details active Trickbot and BazarLoader campaigns that use heavily obfuscated JavaScript, LNK files, and malicious Office attachments to deliver multi-stage payloads with sandbox-evasion techniques, documents execution flows (wscript/cmd/powershell/mshta), maps to MITRE ATT&CK techniques, and provides IoCs (file hashes, malicious URLs and C2 domains) for detection and mitigation.