Fake Google and Cloudflare Verification Pages Spread StealC, HijackLoader, and NetSupport Malware
Threat actors are leveraging ClickFix social engineering campaigns that mimic Google and Cloudflare verification pages to trick users into executing malicious PowerShell commands. These attacks facilitate the deployment of various malware families, including StealC, HijackLoader, and NetSupport RAT, by bypassing traditional security controls.