However, targets that want to read the document are directed to a fake device registration link that instructs them to run PowerShell as an administrator and paste attacker-provided code.

If you cannot run PowerShell script in Windows 11/10 and see message Cannot be loaded because running scripts is disabled on this system, see this post.

IT teams should revisit PowerShell restrictions as an increasingly used click-and-fix technique has users self-serving fake system issues by invoking malicious PowerShell scripts themselves ...