BleepingComputer reports that U.S., Germany, Japan, and UK systems have been subjected to ongoing attacks by suspected Vietnamese hacking group CoralRaider leveraging a content delivery network cache to facilitate the deployment of information-stealing payloads. Intrusions commence with the delivery of an archive with a malicious .LNK file, which when opened runs an HTML Application file retrieved from a CDN platform subdomain to avert detection, according to a Cisco Talos report.

Source: SC Magazine