The Zero Day Initiative classifies a vulnerability in the display of the contents of LNK files in Windows as high-risk.

If you cannot open exe or lnk files, learn how to reset, repair, restore broken EXE or LNK file association in Windows. Use FixExec or apply this fix.

When opened, this LNK file quietly connects to a command-and-control (C2) server controlled by the threat actors, downloads a MSI installer file, and runs the installer.

A sophisticated cyber‑espionage operation is exploiting Windows shortcut files disguised alongside seemingly genuine PDF newsletters to surreptitiously infiltrate institutions across Asia and the ...