Fake Google and Cloudflare Verification Pages Spread StealC, HijackLoader, and NetSupport Malware

Threat actors are leveraging ClickFix social engineering campaigns that mimic Google and Cloudflare verification pages to trick users into executing malicious PowerShell commands. These attacks facilitate the deployment of various malware families, including StealC, HijackLoader, and NetSupport RAT, by bypassing traditional security controls.

Edward Kiledjian @ekiledjian