/
initial_access_vector:user_execution × criticity:medium × limpar

Resultados

3 casos · pág. 1/1

darkreading.com · medium

Surge in ClickFix-style campaigns impersonating Claude and ChatGPT to target developers and enterprise staff

Campaigns that impersonate popular AI brands, notably Claude and ChatGPT, are on the rise. They typically use ClickFix-like social engineering tactics to target unsuspecting enterprise employees, with developers described as being at particular risk. The article, available only as a short excerpt, gives no details on payloads, infrastruct…

welivesecurity.com · medium

Phishing evolves: QR codes, ConsentFix OAuth token theft, ClickFix variants and deepfake-enabled fraud defeat traditional red-flag training

ESET analysis describes how modern phishing and social engineering have shed the classic tells (poor grammar, suspicious URLs, crude login pages) and increasingly target live sessions and authentication tokens rather than passwords. Cybercrime-as-a-service phishing kits and AI tooling lower the cost of tailored, rapport-building lures. Ac…

unit42.paloaltonetworks.com · medium

Atomic macOS Stealer (AMOS) infection chain analyzed from fake macOS toolkit install page, August 2026

Unit 42 analyzed an Atomic macOS (AMOS) stealer infection generated in a lab on Aug. 5, 2026, starting from a fake "macOS toolkit" instruction page hosted at getmacouscloud.com. The page tells victims to paste a command into Terminal, a ClickFix-style copy/paste technique, which downloads a Zsh script and then installs a Mach-O AMOS paylo…