EastWind Attack Unleashes Advanced Backdoor Malware

Booby-Trapped LNK Files: The Gateway to Infection

The EastWind attack targets Russian government and IT organizations using a sophisticated spear-phishing campaign. This attack involves sending emails with RAR archive attachments containing Windows shortcut (LNK) files. When these files are opened, a sequence of infections begins, deploying malware such as GrewApacha and PlugY.