LNKR

Malware type
trojan
Profile updated
2026-07-07 14:33:34

Targeted industries: education-and-nonprofits technology-and-telecommunications media-and-entertainment

Context

The LNKR trojan is a malicious browser extension that will monitor the websites visited by the user, looking for pages with administrative privileges such as blog sites or web-based virtual learning environments. When the administrative user posts to the page, the infected extension will execute stored cross-site scripting attack and injects malicious JavaScript into the legitimate HTML of the page. This is used to redirect the second-party visitors of the site to both benign and malicious domains.

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Js.Lnkr (report)
  • github.com — Readme.Md (report)
  • github.com — Lnkr (report)
  • riskiq.com — Lnkr Browser Extension (report)
  • krebsonsecurity.com — The Case For Limiting Your Browser Extensions (report)

External references