Trust Me, I'm a Shortcut: New LNK Abuse Methods
Presenter: Wietze Beukema
Are Windows shortcut files still a security risk in 2026?
In this session, Wietze Beukema reveals new, previously undocumented ways attackers can abuse .LNK files for payload delivery and command execution. These aren’t just simple tricks. They’re advanced techniques that make malicious shortcuts even more deceptive.
You’ll learn how these methods work, why they bypass expectations, and how they compare to older LNK exploits. The talk also breaks down the research approach behind these discoveries and introduces an open-source tool for testing and simulating LNK-based attacks.
If you’re into red teaming, malware techniques, or Windows security, this is a must-watch.
#cybersecurity #windowssecurity #redteam #infosec #malware #hacking
///Black Hills Infosec Socials
Twitter: / bhinfosecurity
Mastodon: https://infosec.exchange/@blackhillsi...
LinkedIn: / antisyphon-training
Discord: / discord
///Black Hills Infosec Shirts & Hoodies
https://spearphish-general-store.mysh...
///Black Hills Infosec Services
Active SOC: https://www.blackhillsinfosec.com/ser...
Penetration Testing: https://www.blackhillsinfosec.com/ser...
Incident Response: https://www.blackhillsinfosec.com/ser...
///Backdoors & Breaches - Incident Response Card Game
Backdoors & Breaches: https://www.backdoorsandbreaches.com/
Play B&B Online: https://play.backdoorsandbreaches.com/
///Antisyphon Training
Pay What You Can: https://www.antisyphontraining.com/pa...
Live Training: https://www.antisyphontraining.com/co...
On Demand Training: https://www.antisyphontraining.com/on...
Antisyphon Discord: / discord
Antisyphon Mastodon: https://infosec.exchange/@Antisy_Trai...
///Educational Infosec Content
Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/
Wild West Hackin' Fest YouTube: / wildwesthackinfest
Antisyphon Training YouTube: / antisyphontraining
Active Countermeasures YouTube: / activecountermeasures
Threat Hunter Community Discord: / discord
Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/