Evolving the ClickFix tactic

Evolving the ClickFix tactic

a year ago
Anonymous $Uu1e96lHBL

https://www.bleepingcomputer.com/news/security/malicious-ads-push-lumma-infostealer-via-fake-captcha-pages/

A large-scale malvertising campaign distributed the Lumma Stealer info-stealing malware through fake CAPTCHA verification pages that prompt users to run PowerShell commands to verify they are not a bot.

The campaign leveraged the Monetag ad network to propagate over one million ad impressions daily across three thousand websites.