Volt Typhoon against energy etc. Attackers may be using Mshta.exe or Rundll32.exe to execute malicious code. Read more...