Monday 25 May 2026 20:05:42 GMT+02:00
Netcrook
#Amatera
Windows’ Old Script Host Is Back in the Dock as Stealers Ride In
MSHTA’s return to attacker toolkits shows how a trusted Windows component can still be used as a delivery path for commodity malware families such as LummaStealer and Amatera.
When a Retired Windows Relic Becomes the Delivery Truck for Stealers
MSHTA is not a zero-day exploit; it is a trusted Windows script host that attackers can abuse as a low-friction launch path for commodity malware.