
Node.js-Based Windows RAT Delivered via ClickFix Phishing Luse
Cybersecurity researchers at Netskope Threat Labs have uncovered a sophisticated new phishing campaign utilizing the ClickFix delivery vector. Initially gaining prominence in early 2025 for distributing malware like LegionLoader and LummaStealer, the ClickFix technique now delivers a highly adaptable Node. js-based remote access Trojan (RAT) to Windows users. The attackers use fake CAPTCHA prompts to […] The post Node.js-Based Windows RAT Delivered via ClickFix Phishing Luse appeared first on Cyber Security News.