Attackers Abuse Trust with Indirection

Huntress Labs describes incidents in which attackers used living-off-the-land binaries/scripts (mshta.exe, PowerShell, cmd.exe) and scheduled tasks to download and execute malicious payloads and maintain persistence via Run keys and logon scripts; the report emphasizes escalating indirection in attacks, detection based on persistent footholds rather than just process execution, and offers Huntress detection/remediation services.