GhostTree: Recursive NTFS Junctions Bypass Windows Antivirus Scans17. June 2026CybersecurityGhostTree exploits improperly guarded NTFS junctions in the Windows file system to trap scanners in infinite loops and hide malicious files from detection. Share on: