GhostTree: Recursive NTFS Junctions Bypass Windows Antivirus Scans17. June 2026CybersecurityGhostTree exploits improperly guarded NTFS junctions in the Windows file system to trap scanners in infinite loops and hide malicious files from detection. Share on:
GhostTree Attack Uses Recursive Windows Junctions to Conceal Malware16. June 2026CybersecurityRecursive NTFS junctions enable attackers to hang Defender scans and keep malware undetected. Share on:
