NEUGhostTree: Recursive NTFS Junctions Bypass Windows Antivirus Scans17. June 2026CybersecurityShare on:GhostTree exploits improperly guarded NTFS junctions in the Windows file system to trap scanners in infinite loops and hide malicious files from detection. Share on: