A new browser attack vectors just dropped, and it’s called FileFix — an alternative to the well-known ClickFix attack. This method, discovered and shared by mrd0x, shows how attackers can to execute commands right from browser, without requesting target to…

ClickFix attacks surged 517% in a year, tricking users into executing malicious code. A new "FileFix" tactic exploits Windows File Explorer for stealthy malware delivery.

FileFix is a new Windows technique that allows silent script execution by bypassing Mark of the Web. Attackers trick users into saving and renaming HTML pages to .HTA files.

For over a year, Huntress researchers have been tracking the rise of ClickFix attacks, a form of social engineering that tricks users into executing malicious code by disguising it as a CAPTCHA ve…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

A new, advanced FileFix attack campaign uses social engineering and steganography to hide malware in images, bypassing traditional security defenses.

A new FileFix campaign is tricking users into pasting malicious commands into file upload windows to deliver the StealC data stealer.

A new phishing variant uses cache smuggling to hide a malicious ZIP in the browser cache. The FileFix lure then executes PowerShell to install malware without any downloads.

StealC's seller has returned with Stadia RAT, combining credential theft, hidden desktop control, and remote command execution using code reused from StealC v3.5.