LNK is a filename extension for shortcuts to local files in Windows. LNK shortcuts provide quick access to executable (.exe) files without requiring the user to access the full path of the program.
Shell Link Binary File Format (.LNK) files contain metadata about the executable file, including the original path to the target application.
Windows uses this data to support launching applications, chaining scenarios, and storing application references in a target file.
Since LNK files provide a convenient alternative to opening a file, threat actors can use them to create script-based threats. One such method is to use PowerShell.
Threat actors can insert a malicious script into the PowerShell command in the target path of the LNK file.
Reminder:
Comodo monitors all applications (process IDs) and understands scripts that are part of the system operator and therefore related to the LNK file