#clickfix
#clickfix
[ follow ]
Information security
fromThe Hacker News
1 week agoAnalysing ClickFix: 3 Reasons Why Copy/Paste Attacks Are Driving Security Breaches
ClickFix attacks trick users into executing malicious local commands by copying clipboard code via browser prompts, enabling ransomware and data breaches through SEO poisoning and malvertising.
Information security
fromThe Hacker News
2 weeks agoResearchers Expose TA585's MonsterV2 Malware Capabilities and Attack Chain
TA585 independently conducts sophisticated phishing and web-injection campaigns to deliver MonsterV2 RAT via ClickFix social engineering and PowerShell-based payload execution.
Information security
fromThe Hacker News
1 month agoDPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job Scams
North Korea–linked actors used ClickFix lures to deliver BeaverTail and InvisibleFerret malware to non-developer cryptocurrency, retail, and Web3 roles via fake hiring platforms.
fromTheregister
1 month agoFileFix attacks trick victims into executing infostealers
FileFix is a variation on ClickFix, a newish type of social-engineering technique first spotted last year that tricks victims into running malware on their own devices using fake fixes and login prompts. These types of attacks have surged by 517 percent in the past six months, according to researchers at antivirus and internet security software vendor ESET, making them second most common attack vector behind phishing.
Information security
Information security
fromThe Hacker News
2 months agoShadowCaptcha Exploits WordPress Sites to Spread Ransomware, Info Stealers, and Crypto Miners
ShadowCaptcha uses compromised WordPress sites and fake CAPTCHA pages with ClickFix social engineering to deliver stealers, ransomware, and cryptocurrency miners.
[ Load more ]