Microsoft has released a patch for link (LNK) files. However, it does not stop hackers from abusing them to deliver malware.
Microsoft has silently mitigated CVE-2025-9491, a Windows vulnerability exploited to distribute malware via LNK files ...
Microsoft has silently mitigated a high-severity Windows LNK vulnerability exploited by multiple state-backed and cybercrime ...
In other words, these shortcut files are crafted such that viewing their properties in Windows conceals the malicious ...
The LNK vulnerability was used to launch remote code execution in cyber-espionage, data theft, and fraud attacks.