MoonPeak Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
January 23, 2026
Last Seen
January 23, 2026

MoonPeak is a malware family tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed January 23, 2026; most recent activity January 23, 2026.

Overview

MoonPeak is a Windows-targeted malware family observed being delivered by threat actors via weaponized LNK shortcut files. The LNK-based delivery indicates an initial-access/load mechanism that automates execution on targeted Windows systems, highlighting MoonPeak as an actively deployed threat and a notable vector for Windows infections.

Related Threat Clusters

  • MoonPeak Malware Campaign Targets Windows Users via LNK Files

    A malware campaign has emerged, utilizing LNK shortcut files to distribute MoonPeak, a remote access trojan linked to North Korean threat actors. The primary targets of this attack are South Korean investors and…

    3 articles · Updated January 23, 2026

Recent Intelligence Reports

  • Threat Actors Weaponizes LNK File to Deploy MoonPeak Malware Attacking Windows Systems — Cybersecuritynews · January 23, 2026
  • Threat Actors Exploit LNK Files to Deploy MoonPeak Malware on Windows Systems — Gbhackers · January 23, 2026

Related Entities

Malware North Korea South Korea XenoRAT Windows

CVSS v3.1 Breakdown