Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.

WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...

An advanced malware family brings back a trick from yesteryear — screen hijacking — for effective password theft, along with ...

CRPx0, a cybercrime crew that has rapidly evolved from a scam service to a ClickFix-delivered ransomware and crypto-theft ...

Microsoft published a list of everything wrong with its own defaults.

A TerminalFix campaign, a ClickFix variant, is using fake Cloudflare CAPTCHA prompts to trick users into executing PowerShell ...

SynkLoader malware is spreading through Microsoft Teams phishing, using a fake Windows lock screen to steal credentials and enable remote access.

Teams phishing uses fake IT support messages to trick employees into installing SynkLoader through a malicious MSI file.

A new open-source project called Cybermes has entered the crowded field of AI-powered offensive security tooling, positioning ...

Manage headless AI Gateways on Windows with Scheduled Tasks, hidden launchers, WSL2, systemd, and user lingering for reliable ...

NCC Group's July threat report highlights Jadepuffer, an AI-driven ransomware operation that can carry out much of an attack without a human directing every step. Jadepuffer can change tactics when an ...

A toolkit shaped by decades of Unix history makes technical work second nature on Linux.