3+ day, 4+ hour ago   (23+ words) A new TerminalFix campaign is using counterfeit Cloudflare CAPTCHA pages to trick Windows users into pasting PowerShell commands that ultimately turn infected P...

4+ day, 13+ hour ago   (331+ words) The operation is a browser-based spin on the "ClickFix" social engineering trick, a new Cisco Talos report says. Instead of tricking targets into running operating system commands, the actors talk victims into pasting JavaScript directly into Chrome's address bar or…...

1+ week, 3+ day ago   (212+ words) Microsoft warns the TerminalFix campaign uses fake Cloudflare pages to silently install network-access implants via PowerShell on Windows machines A fake spinner animation is the most sophisticated part of this attack — everything that follows is catastrophic. The payload runs entirely…...

1+ week, 5+ day ago   (23+ words) TerminalFix, a new ClickFix variant, is using fake Cloudflare Turnstile CAPTCHAs to make victims run PowerShell commands that install a persistent reverse tunne...

1+ week, 5+ day ago   (689+ words) Windows users are being targeted through a malicious campaign that turns a ChatGPT shared link into the step of a malware infection. Rather than breaking into the AI platform, the operators place a deceptive message inside a shared conversation and…...

1+ week, 5+ day ago   (441+ words) Microsoft has published details about a Windows malware campaign it calls TerminalFix. The social engineering used to infect people is very similar to what we’ve seen in ClickFix campaigns. A website visitor is presented with a fake Cloudflare CAPTCHA which,…...

1+ week, 6+ day ago   (499+ words) Rather than delivering a conventional infostealer, the campaign builds persistent access and deploys a reverse-tunnel implant capable of turning an infected Windows endpoint into a proxy for reaching internal network resources. The intrusion begins on compromised websites displaying a convincing…...

2+ week, 12+ hour ago   (372+ words) Microsoft has disclosed details of a new ClickFix variant, dubbed TerminalFix, that aims to trick users into running a malicious command in Windows Terminal or PowerShell. "While traditional ClickFix campaigns direct victims to the Windows Run dialog, TerminalFix campaigns apply…...

2+ week, 1+ day ago   (462+ words) A TerminalFix campaign, a ClickFix variant, is using fake Cloudflare CAPTCHA prompts to trick users into executing PowerShell commands that install a reverse-tunnel implant. Documented by Microsoft, the activity targets organizations and can turn a compromised Windows device into a…...

2+ week, 5+ day ago   (643+ words) ClickFix campaigns are turning routine web prompts into Windows infections. A tracked loader, PavinLoader, is delivered through fake verification pages, software downloads, and malicious game installers before pulling in malware. The activity makes victim part of the execution chain. A…...