#lnkfiles — Public Fediverse posts

Update: Mit dem November-Update 2025 veröffentlichte Microsoft einen "Nicht-Patch-Patch". Recht lautlos wurde der Umgang von Windows mit den *lnk-Dateien geändert, wohl mit dem Ziel, die Sicherheitslücke CVE-2025-9491 zu schließen.

Mehr: https://maniabel.work/archiv/401

#infosec #infosecnews #lnkfiles #malware #zeroday #BeDiS

Update: Mit dem November-Update 2025 veröffentlichte Microsoft einen "Nicht-Patch-Patch". Recht lautlos wurde der Umgang von Windows mit den *lnk-Dateien geändert, wohl mit dem Ziel, die Sicherheitslücke CVE-2025-9491 zu schließen.

Mehr: https://maniabel.work/archiv/401

#infosec #infosecnews #lnkfiles #malware #zeroday #BeDiS

Update: Mit dem November-Update 2025 veröffentlichte Microsoft einen "Nicht-Patch-Patch". Recht lautlos wurde der Umgang von Windows mit den *lnk-Dateien geändert, wohl mit dem Ziel, die Sicherheitslücke CVE-2025-9491 zu schließen.

Mehr: https://maniabel.work/archiv/401

#infosec #infosecnews #lnkfiles #malware #zeroday #BeDiS

APT-C-24 (Sidewinder) resurfaces with LNK phishing campaigns:
• Compressed archives with/ .docx.lnk shortcuts
• MSHTA executing multi-obfuscated scripts
• Memory-loaded payloads for stealth persistence
• Gov, defense, and energy orgs in South Asia are key targets
💬 Join the discussion: Is this pivot to LNK vectors a sign of what’s next for APT delivery tactics?
Follow @technadu for continued APT coverage.

#CyberAttack #Phishing #LNKFiles #APTThreats #SouthAsia #Cybersecurity #Infosec #ThreatIntel

APT-C-24 (Sidewinder) resurfaces with LNK phishing campaigns:
• Compressed archives with/ .docx.lnk shortcuts
• MSHTA executing multi-obfuscated scripts
• Memory-loaded payloads for stealth persistence
• Gov, defense, and energy orgs in South Asia are key targets
💬 Join the discussion: Is this pivot to LNK vectors a sign of what’s next for APT delivery tactics?
Follow @technadu for continued APT coverage.

#CyberAttack #Phishing #LNKFiles #APTThreats #SouthAsia #Cybersecurity #Infosec #ThreatIntel

Very neat .lnk file analysis in Velociraptor 0.73

"Finding the LNK: Techniques and methodology for advanced analysis with Velociraptor"

https://www.rapid7.com/blog/post/2024/11/01/finding-the-lnk-techniques-and-methodology-for-advanced-analysis-with-velociraptor/

#LNKFiles #Velociraptor #Analysis #CTI #DFIR #IncidentResponse #ThreatHunting

Very neat .lnk file analysis in Velociraptor 0.73

"Finding the LNK: Techniques and methodology for advanced analysis with Velociraptor"

https://www.rapid7.com/blog/post/2024/11/01/finding-the-lnk-techniques-and-methodology-for-advanced-analysis-with-velociraptor/

#LNKFiles #Velociraptor #Analysis #CTI #DFIR #IncidentResponse #ThreatHunting

Very neat .lnk file analysis in Velociraptor 0.73

"Finding the LNK: Techniques and methodology for advanced analysis with Velociraptor"

https://www.rapid7.com/blog/post/2024/11/01/finding-the-lnk-techniques-and-methodology-for-advanced-analysis-with-velociraptor/

#LNKFiles #Velociraptor #Analysis #CTI #DFIR #IncidentResponse #ThreatHunting

Very neat .lnk file analysis in Velociraptor 0.73

"Finding the LNK: Techniques and methodology for advanced analysis with Velociraptor"

https://www.rapid7.com/blog/post/2024/11/01/finding-the-lnk-techniques-and-methodology-for-advanced-analysis-with-velociraptor/

#LNKFiles #Velociraptor #Analysis #CTI #DFIR #IncidentResponse #ThreatHunting

Very neat .lnk file analysis in Velociraptor 0.73

"Finding the LNK: Techniques and methodology for advanced analysis with Velociraptor"

https://www.rapid7.com/blog/post/2024/11/01/finding-the-lnk-techniques-and-methodology-for-advanced-analysis-with-velociraptor/

#LNKFiles #Velociraptor #Analysis #CTI #DFIR #IncidentResponse #ThreatHunting

Cyble Researchers Uncover Sophisticated Attack Using VSCode for Remote Access https://thecyberexpress.com/attack-uses-vscode-for-remote-access/ #MaliciousPythonpackages #China-BasedThreatActor #TheCyberExpressNews #TheCyberExpress #FirewallDaily #CyberNews #CybleInc. #LNKfiles

Cyble Researchers Uncover Sophisticated Attack Using VSCode for Remote Access https://thecyberexpress.com/attack-uses-vscode-for-remote-access/ #MaliciousPythonpackages #China-BasedThreatActor #TheCyberExpressNews #TheCyberExpress #FirewallDaily #CyberNews #CybleInc. #LNKfiles

Cyble Researchers Uncover Sophisticated Attack Using VSCode for Remote Access https://thecyberexpress.com/attack-uses-vscode-for-remote-access/ #MaliciousPythonpackages #China-BasedThreatActor #TheCyberExpressNews #TheCyberExpress #FirewallDaily #CyberNews #CybleInc. #LNKfiles

Turla APT Group Suspected of Utilizing Tiny BackDoor Exploiting MSBuild for Stealthy Attacks https://thecyberexpress.com/new-turla-apt-groups-tiny-backdoor-tactics/ #TurlaAdvancedPersistentThreat #MicrosoftBuildEngine #TheCyberExpressNews #CybersecurityNews #TheCyberExpress #MSBuildproject #FirewallDaily #TurlaAPTGroup #DarkWebNews #LNKfiles

Turla APT Group Suspected of Utilizing Tiny BackDoor Exploiting MSBuild for Stealthy Attacks https://thecyberexpress.com/new-turla-apt-groups-tiny-backdoor-tactics/ #TurlaAdvancedPersistentThreat #MicrosoftBuildEngine #TheCyberExpressNews #CybersecurityNews #TheCyberExpress #MSBuildproject #FirewallDaily #TurlaAPTGroup #DarkWebNews #LNKfiles

Turla APT Group Suspected of Utilizing Tiny BackDoor Exploiting MSBuild for Stealthy Attacks https://thecyberexpress.com/new-turla-apt-groups-tiny-backdoor-tactics/ #TurlaAdvancedPersistentThreat #MicrosoftBuildEngine #TheCyberExpressNews #CybersecurityNews #TheCyberExpress #MSBuildproject #FirewallDaily #TurlaAPTGroup #DarkWebNews #LNKfiles

Turla APT Group Suspected of Utilizing Tiny BackDoor Exploiting MSBuild for Stealthy Attacks https://thecyberexpress.com/new-turla-apt-groups-tiny-backdoor-tactics/ #TurlaAdvancedPersistentThreat #MicrosoftBuildEngine #TheCyberExpressNews #CybersecurityNews #TheCyberExpress #MSBuildproject #FirewallDaily #TurlaAPTGroup #DarkWebNews #LNKfiles