{"id":33561,"date":"2023-01-23T14:59:20","date_gmt":"2023-01-23T14:59:20","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2023\/01\/23\/threat-groups-are-using-windows-lnk-files-to-gain-access-the-register\/"},"modified":"2023-01-23T15:00:25","modified_gmt":"2023-01-23T15:00:25","slug":"threat-groups-are-using-windows-lnk-files-to-gain-access-the-register","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2023\/01\/23\/threat-groups-are-using-windows-lnk-files-to-gain-access-the-register\/","title":{"rendered":"Threat groups are using Windows LNK files to gain access \u2022 The Register"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n

Microsoft’s transfer final 12 months to dam macros by default in Workplace purposes is forcing miscreants to search out different instruments with which to launch cyberattacks, together with the software program vendor’s LNK information \u2013 the shortcuts Home windows makes use of to level to different information.<\/p>\n

“When Microsoft introduced the modifications to macro habits in Workplace on the finish of 2021, only a few of probably the most prevalent malware households used LNK information as a part of their preliminary an infection chain,” Guilherme Venere, risk researcher at Talos, wrote<\/a> in a report dated January 19. “Normally, LNK information are utilized by worm sort malware like Raspberry Robin with a purpose to unfold to detachable disks or community shares.”<\/p>\n

The information are additionally serving to criminals acquire preliminary entry into victims’ programs earlier than operating such threats because the Qakbot backdoor malware, malware loader Bumblebee<\/a>, and IcedID, a malware dropper, in response to the Talos researchers.<\/p>\n

\n