Taking advantage of this, hackers co-opted a third-party Windows 11 ToolBox script to distribute malware.
On the surface, the app works as advertised and helps add the Google Play Store to Windows 11.
But since the script worked as advertised, no one noticed something was amiss.

mustafahacalaki / Getty Images
Fattah also pointed out that the projects use of a Powershell script was the first sign that spooked him.
“We need to be very cautious of running any Powershell scripts from the internet.
Hackers have and will continue to leverage Powershell to distribute malware,” warned Fattah.

Bill Hinton / Getty Images
“Security is a shared responsibility as described on GitHubs own security approach,” pointed out Cundiff.