Hackers deploy CHM malware with weaponized shortcut files

TLDR:

• Hackers are using weaponized shortcut files to deploy CHM malware.
• Cybersecurity researchers at ASEC discovered this trend.

Hackers have been exploiting weaponized shortcut files to deploy CHM malware, taking advantage of the ability of these files to execute malicious code without the user being targeted knowing. Shortcut files are widely used and provide a good platform for deploying malware, allowing hackers to bypass security checks and make systems vulnerable. Cybersecurity researchers at ASEC recently discovered that hackers have been actively abusing the use of weaponized shortcut files to deploy CHM malware. AhnLab detected a Korean CHM malware that is currently stealing user data, following a trend of malware being delivered in different formats like LNK, DOC, and OneNote by the same actor.

Although the general execution of this attack is not new, recent samples have shown more complex obfuscation methods. These methods signify an improved form of evasion by a single group responsible for previous campaigns. The malware affects only Korean users, who should be cautious when opening files from untrusted or suspicious sources.

Overall, the use of weaponized shortcut files by hackers to deploy CHM malware is a growing trend that poses a significant threat to cybersecurity. Being aware of the tactics used by hackers and taking precautionary measures can help protect individuals and organizations from falling victim to such attacks.