MSHTA Abuse Resurfaces as Threat Actors Push LummaStealer and Amatera Payloads
Wed May 20 2026
Malware
cyberpress.org
A surge in cyberattacks exploiting the Microsoft HTML Application Host (MSHTA), which is a legacy Windows utility, attackers continue to abuse it as aLiving-off-the-Land binary (LOLBIN) to execute VBScript and JavaScript. By leveraging this trusted default application, cybercriminals bypass security controls to deploy a wide range of malware, from basic password-stealing tools to advanced persistent […]
The post MSHTA Abuse Resurfaces as Threat Actors Push LummaStealer and Amatera Payloads appeared first on Cyber Security News.