What is the true nature of the shortcut file I thought was a privacy consent form?

**Executive Summary:** This report describes a malicious campaign that distributes .LNK shortcut files masquerading as consent/document files; executing the LNK runs obfuscated PowerShell which downloads additional scripts and executes payloads in memory (fileless), installs persistence via Windows Task Scheduler, deploys information-stealing scripts and a backdoor loader, and uses decoy documents to avoid detection; recommended mitigations include verifying file extensions and delivery paths, auditing Task Scheduler and PowerShell execution logs, and monitoring external connections.