Use Playerctl, Python, and Conky timer to create a 'now playing' Spotify desktop widget.
A fake $TEMU crypto airdrop uses the ClickFix trick to make victims run malware themselves and quietly installs a remote-access backdoor.