Netskope Threat Labs

WinLnk

ATP Sandbox Adv. Heuristics

WinLnk is a detection name for malicious Windows shortcut (LNK) files used to execute malware.

First seen
April 2022
Last seen
October 2026
WinLNK
Alert Name
Archive-ZIP.Trojan.WinLnk
Document-HTML.Dropper.WinLNK
Document-HTML.Trojan.WinLnk
Email-MSG.Trojan.WinLnk
Package.Trojan.WinLnk
Script-BAT.Downloader.WinLNK
Script-JS.Dropper.WinLNK
Script-JS.Trojan.WinLnk
Script-PowerShell.Trojan.WinLnk
Script-WScript.Trojan.WinLnk