ThreatCluster

MastaStealer Uses Windows LNK Files to Execute PowerShell and Evade Defender

First seen 2 Dec 2025, 18:33 UTC •GbhackersCybersecuritynews •16

Article Content

Browse articles
ThreatCluster

MastaStealer has been identified as a malware that exploits Windows LNK files to execute PowerShell commands, effectively bypassing Windows Defender security measures. This threat poses risks to users by allowing unauthorized access and control over affected systems. The specific technical details regarding the execution and evasion techniques have been highlighted in recent cybersecurity reports.

How this analysis works

Extracted Entities

1 / 2