Phishing
Double Click
Contributors:
mr.d0x
Description:
URL files are shortcuts for the browser and can be used to open a URL. Just like LNKs, URL files can include an icon to display for the file and that can be leveraged for NetNTLM hash harvesting.
OS:
Windows
Recommendation:
“DisableThumbnailsOnNetworkFolders” and “DisableThumbnails” group policy settings.
Resources:
File Samples: