Detected #KongTuke infection chain

Compromised site
-->
aawbi[.]com/5232f.js
-->
aawbi[.]com/js.php (ClickFix)
-->
zeftasarim[.]com/lefter (Powershell)

c75b99b5a5d90f74aabb4596cf515f6f448b224a04e7e30d6f0d10b8348d8f6b lefter