#powershell
-
ROMULUS Platform Turns ClickFix Into a Malware Delivery Pipeline
Forescout has detailed ROMULUS, a malware delivery service that uses ClickFix lures on fake landing pages to make victims run malicious commands themselves.
-
A documentation placeholder domain now serves ClickFix attacks
The third-party.com domain, used for years as a generic placeholder in developer docs and code samples, now shows a fake Cloudflare check that nudges Windows users into running malicious PowerShell.
-
TerminalFix: Fake Cloudflare CAPTCHAs Open the Door to Corporate Networks
Microsoft has disclosed a new strain of ClickFix attacks that tricks the user into running a malicious command in Windows Terminal or PowerShell and deploys a reverse tunnel into the victim's network.
-
The 1998 World Atlas on Windows 11: A Time Machine from the Thrift Store
A developer poured a surprising amount of effort into reviving an educational CD-ROM from the Windows 95 era that his son had found in a thrift store. The result was a compatibility layer with an automated build and a release on GitHub.