MastaStealer Exploits Windows LNK to Launch PowerShell and Bypass Defender

Gbhackers •Mayura Kathir • November 12, 2025

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

MastaStealer Uses Windows LNK Files to Execute PowerShell and Evade Defender MastaStealer has been identified as a malware that exploits Windows LNK files to execute PowerShell commands, effectively bypassing Microsoft Defender's security measures. This tactic poses a risk to users by enabling unauthorized access and execution of malicious scripts. The specific impact on affected systems and users has not been detailed in the reports. 2 sources 33

Extracted Entities

MastaStealer Exploits Windows LNK to Launch PowerShell and Bypass Defender

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)