TLDR InfoSec · STRATEGIES & TACTICS

HOW MALWARE AUTHORS PLAY WITH THE LNK FILE FORMAT

blog.quarkslab.com10 min read

Summary from the TLDR InfoSec newsletter

Malware authors are utilizing LNK files as a malware delivery mechanism now that Microsoft is deprecating Macros. This blog post goes into detail on various techniques that are used by the malware authors like running minimized, executing other binaries as well as icon smuggling. The post contains links for defenders to use for analyzing LNK files.