LEMON BLOG

Email remains one of the easiest entry points for attackers, and while many security tools claim to stop sophisticated threats, only a handful truly understand the evolving landscape of phishing, impersonation, and business email compromise. Mimecast Incdyr is Mimecast's answer to this problem — a deep-intelligence, behavior-aware system designed to not only block threats but also help organisations make sense of them.

PDFs have long been one of the most trusted document formats in the world — widely used for invoices, reports, contracts, and even resumes. But in the cybersecurity world, that same trust has made PDFs a perfect disguise for malicious intent. Cybercriminals know that people rarely suspect a simple PDF attachment, and that's exactly why it has become a popular weapon in phishing and malware campaigns.

Microsoft has raised alarms over a recent phishing campaign that cleverly used AI technology to conceal its malicious code and slip past email security filters. According to the company, the attackers appeared to have harnessed a large language model (LLM) to generate complex, machine-crafted code that mimicked legitimate business content. 

A newly disclosed zero-day vulnerability in Windows shortcut files (.lnk) has been exploited in-the-wild for several years by state-sponsored hacking groups. Identified as ZDI-CAN-25373, the flaw allows attackers to silently execute malicious commands using shortcut files—making it difficult to detect through traditional security tools.

Security researchers revealed that this vulnerability has been abused since at least 2017 by advanced persistent threat (APT) groups linked to 11 different countries.