

Something I’m not understanding is how these payloads even get executed. In “First Stage” in Figure 3, it explains that the user is redirected to a Github repo and then the payload is downloaded, but how exactly does it go to the second stage from there? I would assume the user has to be dumb enough to double-click on the payload that got downloaded, but the article makes it sound like this all happens automatically after clicking the initial ad link
Voyager is available as a PWA