logo

Windows LNK Exploits

State-backed and criminal actors have long abused Windows .lnk shortcut handling and UI‑misrepresentation flaws (e.g., ZDI-CAN-25373/CVE-2025-9491) to hide command-line arguments and deliver malware, prompting detection guidance and uneven vendor fixes.

List of posts related to this topic

Post TitleDate Published↓Threat ScoreFeed
Microsoft: New Windows LNK spoofing issues aren't vulnerabilities2026-02-1278Bleeping Computer
Not Subscribed
ZDI-CAN-25373: Windows Shortcut Exploit Abused as Zero-Day in Widespread APT Campaigns2026-01-0190TrendAI Security Blog
Not Subscribed
Microsoft quietly shuts down Windows shortcut flaw after years of espionage abuse2025-12-0485The Register (Security)
Not Subscribed
Microsoft mitigates Windows LNK flaw exploited as zero-day2025-12-0390Bleeping Computer
Not Subscribed
Microsoft Patched Windows LNK Vulnerability Abused by Hackers to Hide Malicious Code2025-12-0385cybersecurityNews.com
Not Subscribed
Windows Shortcut (LNK) Malware Strategies2025-07-0270Palo Alto Networks Unit 42
Not Subscribed
Nation-state actors and cybercrime gangs abuse malicious .lnk files for espionage and data theft2025-03-1890Security Affairs
Not Subscribed
8-Year Old Windows Shortcut Zero-Day Exploited by 11 State-Sponsored Hacker Groups2025-03-1880cybersecurityNews.com
Not Subscribed
New Windows zero-day exploited by 11 state hacking groups since 20172025-03-1890Bleeping Computer
Not Subscribed
Microsoft isn't fixing 8-year-old shortcut exploit abused for spying2025-03-1885The Register (Security)
Not Subscribed

1–10 of 10

Built by the dogesec team. Copyright 2026.