You click a malicious banner ad; an exploit kit (e.g., RIG or Fallout) silently installs the spy trojan without any user interaction.
The "wccom" might be a misspelling of , referring to the security.txt file found in the /.well-known/ directory of many websites [1].
