CERT24New ClickFix campaign hides VBScript in the browser cacheLoading data…
CERT24Threat Observatory
Period

New ClickFix campaign hides VBScript in the browser cache

A ClickFix campaign hid a VBScript payload in the browser cache disguised as an image. Victims were directed by a fake CAPTCHA to open the Windows Run dialog, paste a command from the clipboard and press Enter.

← Back to intelligence

New ClickFix campaign hides VBScript in the browser cache

A ClickFix campaign hid a VBScript payload in the browser cache disguised as an image. Victims were directed by a fake CAPTCHA to open the Windows Run dialog, paste a command from the clipboard and press Enter.