A TerminalFix campaign, a ClickFix variant, is using fake Cloudflare CAPTCHA prompts to trick users into executing PowerShell commands that install a reverse-tunnel implant. Documented by Microsoft, the activity targets organizations and can turn a compromised Windows device into a network pivot point for attackers. The infection begins on compromised websites that replace content with […]
The post Microsoft Warns TerminalFix ClickFix Campaign Uses Fake CAPTCHA to Deploy Reverse Tunnel appeared first on Cyber Security News.