Researchers have found two distinct new malware families that are exploiting the newly discovered Windows shell LNK vulnerability. One of the new pieces of malware, dubbed Chymine, exploits the vulnerability to infect new machines and then tries to connect to a remote server and download another piece of malicious code. Another piece of malware is a keylogger, designed to monitor an infected PC s input and look for high-value data such as online banking passwords. Microsoft has said that it is working on a patch for the flaw, which can be exploited via infected USB drives, via WebDAV or possibly through drive-by downloads.
Source: https://threatpost.com/new-malware-emerges-exploit-windows-lnk-flaw-072310/74251/