Legacy Microsoft Utility Fuels New Wave of Malware

Researchers Link MSHTA Windows Utility to Lumma Stealer, ClickFix Campaigns Cybercriminals continue abusing Microsoft’s legacy MSHTA utility to deliver malware, with researchers saying that the default-enabled Windows component remains a favored living-off-the-land tool for PowerShell attacks, info stealers and multi-stage malware loaders.