Threat actors are abusing npm’s package-distribution ecosystem to host convincing fake Cloudflare verification pages on trusted mirror domains, turning developer infrastructure into a phishing delivery layer. OX Security said it identified 24 malicious npm packages containing identical HTML code designed to render a fake CAPTCHA page and redirect visitors to attacker-controlled infrastructure. The campaign does […]
The post Hackers Turn Trusted npm Mirrors Into Hosts for Fake Cloudflare ClickFix Pages. appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.