Microsoft Threat Intelligence has discovered TerminalFix, a campaign that uses fake CAPTCHAs to trick users into running PowerShell scripts.
CRPx0, a cybercrime crew that has rapidly evolved from a scam service to a ClickFix-delivered ransomware and crypto-theft ...
Microsoft has uncovered a new cyberattack called TerminalFix, which uses fake CAPTCHA pages to trick users into installing ...
Threat Actors Target Conference Attendees With Malware Lures** Huntress research shows attackers using X, Google Docs and GitHub after conferences to turn networking into malware delivery against ...
A joint cybersecurity advisory by the FBI, CISA, and HHS warns about Medusa ransomware targeting more than 500 critical ...
Russia GRU espionage campaign targeting NATO defense and diplomatic networks in Romania, Spain, and Turkey deployed the ...
A ransomware affiliate weaponized Claude Code to autonomously steal LDAP credentials, backdoor VPNs, and exfiltrate SQL ...
The pages impersonate Cloudflare and other trusted services. Instead of presenting a normal CAPTCHA challenge, they instruct users to open PowerShell or Command Prompt and paste ...
The ClickFix-style campaign features a sophisticated, multistage attack chain that includes reverse tunnels into victim ...
A new ClickFix variant dubbed TerminalFix uses fake Cloudflare CAPTCHA prompts on compromised websites to trick victims into ...
Morphisec uncovers RevStealer, a Windows infostealer spread through a fake Claude app that steals credentials, cryptocurrency ...
Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named ...