Threat Actors Weaponizes LNK File to Deploy MoonPeak Malware Attacking Windows Systems

Cybersecuritynews •Tushar Subhra Dutta • January 23, 2026

A new malware campaign targeting Windows users has emerged, using deceptive LNK shortcut files to distribute MoonPeak, a dangerous remote access trojan. This malware, which appears to be a variant of XenoRAT, has been linked to threat actors affiliated with North Korea. The attack primarily targets South Korean investors and cryptocurrency traders through weaponized files […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

MoonPeak Malware Campaign Targets Windows Users via LNK Files A malware campaign has emerged, utilizing LNK shortcut files to distribute MoonPeak, a remote access trojan linked to North Korean threat actors. The primary targets of this attack are South Korean investors and cryptocurrency traders, with indications that MoonPeak is a variant of XenoRAT. 3 sources 31

Extracted Entities

Threat Actors Weaponizes LNK File to Deploy MoonPeak Malware Attacking Windows Systems

The full story

Extracted Entities

Attack Types (1)

Countries (2)

Malware (2)

Platforms (1)