Phishing| attack.mitre.org
Command and Scripting Interpreter:| attack.mitre.org
T1659 | attack.mitre.org