A malicious script executed on the user system via a phishing email's link. The link triggers a script in Internet Explorer, exploiting a zero-day vulnerability to execute a payload, leading to potential system compromise.