This week’s ThreatsDay Bulletin tracks fake IT calls, abused remote tools, phishing kits, unsafe downloads, ransomware, ...

The pages impersonate Cloudflare and other trusted services. Instead of presenting a normal CAPTCHA challenge, they instruct users to open PowerShell or Command Prompt and paste ...

Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based ...

Socket Inc. researchers have identified 19 malicious extensions targeting Chrome and Edge users. The cybercriminal campaign ...

Cybercriminals pose as IT support on Teams, abuse Quick Assist, and install malware by tricking employees into granting ...

Microsoft Threat Intelligence has discovered TerminalFix, a campaign that uses fake CAPTCHAs to trick users into running PowerShell scripts.

Microsoft has uncovered a new cyberattack called TerminalFix, which uses fake CAPTCHA pages to trick users into installing ...

ChatGPT shared links are used in ClickFix attacks, tricking Windows users into running PowerShell commands that download ...

Attackers use fake MP4 files as containers to hide and deliver malware payloads. Censys found 18 malware builds across 40 ...

TerminalFix tricks victims into running malicious PowerShell commands, launching a multi-stage attack that ends with a ...

The ClickFix-style campaign features a sophisticated, multistage attack chain that includes reverse tunnels into victim ...

Morphisec uncovers RevStealer, a Windows infostealer spread through a fake Claude app that steals credentials, cryptocurrency ...