Dragon Weave - Double-Extension LNK to VBS Bridge

Ibrahim Saud@tektrix

•updated Jun 19, 2026•0•0•1

Correlates execution of a .pdf.lnk shortcut spawning wscript to run the empty.vbs bridge, followed by a PowerShell process.