Slack Bug Allows Remote File Hijacking, Malware Injection

An attacker can supply a malicious hyperlink in order to secretly alter the download path for files shared in a Slack channel.

Link: https://threatpost.com/slack-remote-file-hijacking-malware/144871/