FIN7 group has adopted new phishing techniques, it is leveraging on hidden shortcut files (LNK files) to compromise targets. FIN7 is referred to by many vendors as Carbanak Group The last attacks attributed to FIN7 did not use weaponized Microsoft Office, hackers switched to hidden. shortcut files as an attack vector to launch mshta.exe Then FIN7 hackers used the VBScript functionality launched by mshta.exe to compromise the victims system.”]
Source: https://securityaffairs.co/wordpress/58508/cyber-crime/fin7-group-phishing.html