NordDragonScan, a newly identified information-stealing malware, is actively targeting systems through malicious HTA scripts delivered via deceptive shortened links. This .NET based threat is engineered to quietly harvest sensitive data. Leveraging varied decoy documents and persistent delivery mechanisms, it reflects the increasing complexity and precision of targeted cyber-espionage campaigns in 2025.
