FAKE GOOGLE CHROME ERRORS TRICK YOU INTO RUNNING MALICIOUS POWERSHELL SCRIPTS

Summary from the TLDR InfoSec newsletter

Proofpoint analysts have identified three attack chains that seek to social engineer users into running malicious Powershell scripts. The first two attack chains load a script hosted on Binance's chain which shows the user a fake Google Chrome error and prompts them to “install a root certificate” by copying a Powershell script into an admin Powershell console. The third attack chain sends an email resembling Microsoft Word documents and prompts users to install a Word Online extension which then prompts the user to “fix” the document by running a Powershell script or downloading and executing a file.