Since 2017: Zero-Day-Exploits in Windows LNK files

The Zero Day Initiative (ZDI) has identified with ZDI-CAN-25373 a Windows .lnk file vulnerability that has been abused by APT groups with zero-day exploits and enabled the execution of hidden commands with the aim of espionage and data theft since 2017. Zero Day Initiative's Threat Hunting team has found that nearly 1000 malicious .lnk files abuse ZDI-CAN-25373, a vulnerability that allows attackers to execute hidden malicious commands on a vict…