Fake CAPTCHA Scam 'ClickFix' Spreads Malware Across 700 Trusted Websites, Tricks Users Into Installing Malware on Windows PCs

Researchers found attackers using fake CAPTCHA pages. Users should never run PowerShell or Windows commands requested by ...
Bleeping Computer

New FileFix attack weaponizes Windows File Explorer for stealthy commands

A cybersecurity researcher has developed FileFix, a variant of the ClickFix social engineering attack that tricks users into executing malicious commands via the File Explorer address bar in Windows.
Bleeping Computer

DPRK hackers dupe targets into typing PowerShell commands as admin

North Korean state actor ‘Kimsuky’ (aka ‘Emerald Sleet’ or ‘Velvet Chollima’) has been observed using a new tactic inspired from the now widespread ClickFix campaigns. ClickFix is a social engineering ...
CSOonline

How to log and monitor PowerShell activity for suspicious scripts and commands

Attackers are increasingly abusing sanctioned tools to subvert automated defenses. Tracking your Windows fleet’s PowerShell use — especially consultant workstations — can provide early indications of ...