MS Teams Phishing, ClickFix and Shai-Hulud npm Attacks Dominate Threat Report

Ontinue’s 1H 2026 threat report shows attackers increasingly abusing Microsoft Teams, npm packages, device-code logins and blockchain ClickFix…

·

ClickFix, Cyber Attack, Cyber-Attacks, cybersecurity, Malware, Microsoft Teams, Ontinue, Phishing Scam, Security, Shai-hulud

¶¶¶¶¶

New AvisLoader Windows Malware Uses ClickFix Lure and Tox P2P for C2

Varonis Threat Labs discovered AvisLoader, a Windows malware loader that uses the Tox peer-to-peer network for C2 and arrives through a malicious ClickFix lure.

·

AvisLoader, ClickFix, cybersecurity, DocuSign, Malware, P2P, SCAM, Scams and Fraud, Security, TOX, Windows

¶¶¶¶¶

ClickFix Attacks Spread ChainScript RAT via Fake Spotify and Teams Installers

Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart contracts to locate its C2 server.

·

ChainScript, ClickFix, cybersecurity, Malware, RAT, Security, Smart Contract, Windows

¶¶¶¶¶

Microsoft Warns of TerminalFix Campaign Hiding Malware in PNG Images

TerminalFix uses fake Cloudflare CAPTCHA pages to trick users into running PowerShell malware, creating reverse tunnels that provide access to internal systems.

·

ClickFix, Cloudflare, Cyber Attack, cybersecurity, Malware, Microsoft, Security, TerminalFix, Windows

¶¶¶¶¶

ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families

Malwarebytes links fake Google and Cloudflare verification pages to shared ClickFix infrastructure delivering StealC, NetSupport and other malware.

·

ClickFix, Cloudflare, Cyber Attack, cybersecurity, Google, Malware, Scams and Fraud, Security

¶¶¶¶¶

Reaper macOS Infostealer Abuses Script Editor to Steal Crypto and Passwords

Threat actors are deploying an updated SHub Stealer variant named Reaper that exploits the native macOS Script Editor to bypass OS-level protections and compromise cryptocurrency assets.

·

ClickFix, Crypto, Infostealer, macOS, Malware, Password, Reaper, Script Editor, Security, SHub Stealer, WeChat

¶¶¶¶¶

FBI Chief Kash Patel’s Clothing Store Hacked in ClickFix Infostealer Attack

Hackers compromised FBI Chief Kash Patel’s clothing store in a ClickFix attack that tricked macOS users into installing infostealer malware.

·

ClickFix, Cloudflare, Cyber Attack, Cyber-Attacks, cybersecurity, FBI, Hacking News, Infostealer, Kash Patel, Malware, Security

¶¶¶¶¶

Fake macOS Troubleshooting Sites Used to Steal iCloud Data in ClickFix Scam

Microsoft researchers warn of a new ClickFix campaign targeting macOS with fake guides on Medium and Craft to deploy AMOS and SHub Stealer via Terminal commands.

·

AMOS, ClickFix, Cyber Attack, cybersecurity, ICLOUD, macOS, MacSync, Malware, Microsoft, SCAM, Scams and Fraud, Security, SHub Stealer

¶¶¶¶¶

New ClickFix attack Hides in Native Windows Tools to Reduce Detection Risk

Fake CAPTCHA ClickFix attack tricks users into running malicious commands, using cmdkey and regsvr32 to maintain persistence and avoid detection on Windows

·

Captcha, ClickFix, Cyber Attack, cybersecurity, Fraud, Malware, SCAM, Scams and Fraud, Security, Windows

¶¶¶¶¶

New ClickFix Attack Uses Node.js Malware via Tor to Steal Crypto

Netskope Threat Labs report a new ClickFix attack using fake CAPTCHAs to deploy Tor-backed NodeJS malware and drain crypto wallets on Windows.

·

ClickFix, Crypto, Cyber Attack, cybersecurity, Malware, Node.js, RAT, Scams and Fraud, Security, Tor, Windows

¶¶¶¶¶

ADMIN.FOUNDATION

ADMIN.FOUNDATION

Category: ClickFix