North Korean hackers infiltrate Chile's ATM network after Skype job interview January 16, 2019 https://www.zdnet.com/article/north...chiles-atm-network-after-skype-job-interview/
This is exactly what I tried to explain in another topic. It's easy to say that this person should not have been "click happy", but I think most people would have been tricked, because trust plays a role. And most people probably also think that AV will safe them, but as you can see, it didn't. So yes, a behavior blocking tool would not have been a bad idea.