A sophisticated new malware campaign has been identified that leverages a decades-old Windows utility to carry out ClickFix attacks. By manipulating Google search results related to Amazon, attackers are redirecting unsuspecting users toward malicious infrastructure designed to compromise their systems.
The attack sequence utilizes the legacy ‘finger’ utility, a tool historically used for querying user information on remote systems, to initiate the infection process. Once triggered, the campaign prompts the user to complete a fake CAPTCHA. Engaging with this fraudulent verification step results in the unauthorized installation of malware, most notably the Lumma information stealer, which is designed to harvest sensitive data from infected devices.
This campaign highlights the ongoing threat of “ClickFix” social engineering techniques, where attackers guide users through seemingly routine security or verification prompts to gain execution privileges on a system. By combining deceptive search engine optimization with the repurposing of outdated or obscure system tools, threat actors continue to bypass traditional security awareness by mimicking standard web-based interactions.
Source: Dark Reading
Original article: https://www.darkreading.com/cyberattacks-data-breaches/decades-old-windows-utility-modern-clickfix-attack
Leave a Reply