Microsoft says hackers could exploit the unpatched Windows shortcut vulnerability using drive-by download attacks. Microsoft has recommended that users disable the displaying of shortcuts in Windows. Microsoft promised to patch the problem, but has given no hint about when it will complete that work. Siemens AG confirms one of its customers, a German manufacturer it declined to name, had been victimized by an attack exploiting the bug. Microsoft also admitted that shortcut-based exploits could be embedded into Office documents, which would likely be delivered as e-mail attachments.”]
Source: https://www.csoonline.com/article/2125736/microsoft-warns-of-windows-shortcut-drive-by-attacks.html