Malware modifies shortcut files on desktops to secretly download backdoor programs. Malware targets Skype, Google Chrome, Mozilla Firefox, Opera, and Internet Explorer shortcuts. Instead of using its own tools, the malware downloads common ones available on the internet. The malware, which shows very unusual behavior, appears to still be in the development phase, as it does not yet appear to be widespread. Researchers have found contents like router IP addresses and an Ammyy Admin ID in the dump file.”]
Source: https://hackercombat.com/the-sneaky-way-macro-based-malware-installs-backdoors/