Some panel with title "Login — LNK Builder": http://151.243.18[.]111/login.php 🤷‍♂️ https://t.co...

Summary

A control panel for LNK Builder malware has been identified and shared on social media. The panel is hosted at 151.243.18.111 and appears to be an administrative interface for managing malware campaigns. LNK Builder is a tool used to create malicious Windows shortcut files for phishing and malware distribution.

Indicators of Compromise

• ip — 151.243.18.111
• url — http://151.243.18.111/login.php
• malware — LNK Builder