Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.
When you download a file from the Internet like images, documents, etc. to your Windows computer, they are treated as untrusted files. So if malware is downloaded in the form of JPEG, it will be able ...