GhostTree Attack Uses Recursive Windows Junctions to Conceal Malware16. June 2026CybersecurityShare on:Recursive NTFS junctions enable attackers to hang Defender scans and keep malware undetected. Share on: