MoonPeak Malware — Analysis, Campaigns & Threat Activity

Overview

MoonPeak is a Windows-targeted malware family observed being delivered by threat actors via weaponized LNK shortcut files. The LNK-based delivery indicates an initial-access/load mechanism that automates execution on targeted Windows systems, highlighting MoonPeak as an actively deployed threat and a notable vector for Windows infections.

Related Threat Clusters

• MoonPeak Malware Campaign Targets Windows Users via LNK Files

  A malware campaign has emerged, utilizing LNK shortcut files to distribute MoonPeak, a remote access trojan linked to North Korean threat actors. The primary targets of this attack are South Korean investors and…

  3 articles · Updated January 23, 2026

Recent Intelligence Reports

• Threat Actors Weaponizes LNK File to Deploy MoonPeak Malware Attacking Windows Systems — Cybersecuritynews · January 23, 2026
• Threat Actors Exploit LNK Files to Deploy MoonPeak Malware on Windows Systems — Gbhackers · January 23, 2026

Related Entities