The issue is related to a spoofing vulnerability in the AppX installer that affects Microsoft Windows. This vulnerability can be exploited by attackers using specially crafted packages that include malware, such as Emotet/Trickbot/Bazaloader. An attacker could craft a malicious attachment to be used in phishing campaigns, and users with administrative user rights are more impacted than those with fewer user rights. Microsoft has seen an increase in activity from threat actors leveraging social engineering and phishing techniques to target Windows OS users and utilizing the ms-appinstaller URI scheme. The estimated number of potentially affected devices worldwide is not specified.