Amazon-themed ClickFix uses finger.exe to deliver stealers
Huntress tied the chain to at least three customers; a macOS script URL was offline during research.
66
Product
finger
- Mentions · 7d2
- Mentions · 30d2
- All mentions2
- First seenOct 21, 2026
- Last mentioned4d ago
Timeline
2 articles · newest firstClickFix campaign uses Windows finger to install Lumma
A sponsored Google result for “amazon business” opens a fake login and CAPTCHA that launches finger.exe and NetSupport.
64
Appears with
- Microsoftvendor · 2
- Lumma Stealermalware · 2
- NetSupport Clientmalware · 2
- Windowsproduct · 2
- Huntressorganization · 2
- Googlevendor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.