Uploaded July 2026 | Updated September 2026, 2 weeks ago
Trust Me, I'm a Shortcut: New LNK Abuse Methods
Presenter: Wietze Beukema
Are Windows shortcut files still a security risk in 2026?
In this session, Wietze Beukema reveals new, previously undocumented ways attackers can abuse .LNK files for payload delivery and command execution. These aren’t just simple tricks. They’re advanced techniques that make malicious shortcuts even more deceptive.
You’ll learn how these methods work, why they bypass expectations, and how they compare to older LNK exploits. The talk also breaks down the research approach behind these discoveries and introduces an open-source tool for testing and simulating LNK-based attacks.
If you’re into red teaming, malware techniques, or Windows security, this is a must-watch.
#cybersecurity #windowssecurity #redteam #infosec #malware #hacking
///Black Hills Infosec Socials
Twitter: twitter.com/BHinfoSecurity
Mastodon: https://infosec.exchange/@blackhillsinfosec
LinkedIn: linkedin.com/company/antisyphon-training
Discord: discord.gg/ffzdt3WUDe
///Black Hills Infosec Shirts & Hoodies
spearphish-general-store.myshopify.com/collections/bhis-shirt-collections
///Black Hills Infosec Services
Active SOC: blackhillsinfosec.com/services/active-soc
Penetration Testing: blackhillsinfosec.com/services
Incident Response: blackhillsinfosec.com/services/incident-response
///Backdoors & Breaches - Incident Response Card Game
Backdoors & Breaches: backdoorsandbreaches.com
Play B&B Online: play.backdoorsandbreaches.com
///Antisyphon Training
Pay What You Can: antisyphontraining.com/pay-what-you-can
Live Training: antisyphontraining.com/course-catalog
On Demand Training: antisyphontraining.com/on-demand-course-catalog
Antisyphon Discord: discord.gg/antisyphon
Antisyphon Mastodon: https://infosec.exchange/@Antisy_Training
///Educational Infosec Content
Black Hills Infosec Blogs: blackhillsinfosec.com/blog
Wild West Hackin' Fest YouTube: youtube.com/wildwesthackinfest
Antisyphon Training YouTube: youtube.com/antisyphontraining
Active Countermeasures YouTube: youtube.com/activecountermeasures
Threat Hunter Community Discord: discord.gg/threathunter
Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
Trust Me, I'm a Shortcut: New LNK Abuse Methods
Presenter: Wietze Beukema
Are Windows shortcut files still a security risk in 2026?
In this session, Wietze Beukema reveals new, previously undocumented ways attackers can abuse .LNK files for payload delivery and command execution. These aren’t just simple tricks. They’re advanced techniques that make malicious shortcuts even more deceptive.
You’ll learn how these methods work, why they bypass expectations, and how they compare to older LNK exploits. The talk also breaks down the research approach behind these discoveries and introduces an open-source tool for testing and simulating LNK-based attacks.
If you’re into red teaming, malware techniques, or Windows security, this is a must-watch.
#cybersecurity #windowssecurity #redteam #infosec #malware #hacking
///Black Hills Infosec Socials
Twitter: twitter.com/BHinfoSecurity
Mastodon: https://infosec.exchange/@blackhillsinfosec
LinkedIn: linkedin.com/company/antisyphon-training
Discord: discord.gg/ffzdt3WUDe
///Black Hills Infosec Shirts & Hoodies
spearphish-general-store.myshopify.com/collections/bhis-shirt-collections
///Black Hills Infosec Services
Active SOC: blackhillsinfosec.com/services/active-soc
Penetration Testing: blackhillsinfosec.com/services
Incident Response: blackhillsinfosec.com/services/incident-response
///Backdoors & Breaches - Incident Response Card Game
Backdoors & Breaches: backdoorsandbreaches.com
Play B&B Online: play.backdoorsandbreaches.com
///Antisyphon Training
Pay What You Can: antisyphontraining.com/pay-what-you-can
Live Training: antisyphontraining.com/course-catalog
On Demand Training: antisyphontraining.com/on-demand-course-catalog
Antisyphon Discord: discord.gg/antisyphon
Antisyphon Mastodon: https://infosec.exchange/@Antisy_Training
///Educational Infosec Content
Black Hills Infosec Blogs: blackhillsinfosec.com/blog
Wild West Hackin' Fest YouTube: youtube.com/wildwesthackinfest
Antisyphon Training YouTube: youtube.com/antisyphontraining
Active Countermeasures YouTube: youtube.com/activecountermeasures
Threat Hunter Community Discord: discord.gg/threathunter
Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: wildwesthackinfest.com
