Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: FIN7 used images embedded into document lures that only activate the payload when a user double clicks to avoid sandboxes.