Don’t Click That Shortcut: Phorpiex Botnet Hides in “Your Document” Emails

A high-volume phishing campaign is using ZIP attachments containing malicious .LNK shortcuts disguised as documents (via double extensions and stolen icons) to execute PowerShell commands that fetch and launch a second-stage payload — Phorpiex/Trik — allowing ransomware/cryptominer distribution; defenders are advised to block .LNK files at email gateways and enable visible file extensions.