securityweek.com·May 19, 2026
Attackers are exploiting Microsoft's MSHTA utility to covertly distribute various types of malware through methods like phishing and fake downloads, leading to a rise in silent malware attacks.
As a cybersecurity professional, prioritize monitoring and mitigating the use of the MSHTA utility in your organization's environment, as it is increasingly exploited for delivering malware through phishing and LOLBIN-based attack chains. Implementing security measures that can detect and block such abuse is crucial to strengthen your defense against this emerging threat vector.