#clickfix
#clickfix
[ follow ]
#social-engineering #malware #phishing #cybersecurity #ransomware #ai-phishing #ai-enabled-bec #tiktok #aurostealer
Information security
fromThe Hacker News
6 days agoAnalysing ClickFix: 3 Reasons Why Copy/Paste Attacks Are Driving Security Breaches
ClickFix attacks trick users into executing malicious local commands by copying clipboard code via browser prompts, enabling ransomware and data breaches through SEO poisoning and malvertising.
fromThe Hacker News
1 month agoNew COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused Cyberattacks
COLDRIVER, also tracked as Callisto, Star Blizzard, and UNC4057, is the moniker assigned to a Russia-linked threat actor that's known to target a wide range of sectors since 2019. While early campaign waves were observed using spear-phishing lures to direct targets to credential harvesting pages, the group has been fleshing out its arsenal with custom tools like SPICA and LOSTKEYS, which underscores its technical sophistication.
Information security
Information security
fromThe Hacker News
1 month agoDPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job Scams
North Korea–linked actors used ClickFix lures to deliver BeaverTail and InvisibleFerret malware to non-developer cryptocurrency, retail, and Web3 roles via fake hiring platforms.
fromTheregister
1 month agoFileFix attacks trick victims into executing infostealers
FileFix is a variation on ClickFix, a newish type of social-engineering technique first spotted last year that tricks victims into running malware on their own devices using fake fixes and login prompts. These types of attacks have surged by 517 percent in the past six months, according to researchers at antivirus and internet security software vendor ESET, making them second most common attack vector behind phishing.
Information security
Information security
fromThe Hacker News
2 months agoShadowCaptcha Exploits WordPress Sites to Spread Ransomware, Info Stealers, and Crypto Miners
ShadowCaptcha uses compromised WordPress sites and fake CAPTCHA pages with ClickFix social engineering to deliver stealers, ransomware, and cryptocurrency miners.
[ Load more ]