ClickFix Attack Hides VBScript Payload in Browser Cache
Microsoft says a ClickFix campaign cached a VBScript payload as an image, then tricked users into launching it.
62
Product
Microsoft Defender Antivirus
- Mentions · 7d0
- Mentions · 30d0
- All mentions5
- First seenSep 18, 2026
- Last mentionedOct 6, 2026
Timeline
5 articles · newest firstHackers Hide Microsoft Defender Exclusions From Admins to Evade Antivirus Scans
Huntress warns attackers hide Microsoft Defender exclusions so malware stays unscanned and invisible to admins.
62
Defender Exclusion Abuse: How Attackers Hide Malware from MDAV
Huntress details how attackers abuse Microsoft Defender exclusions to hide malware from scans.
48
MSNightmare has Released a Windows Defender Update DoS Vulnerability Called BigDiskBuster
Researcher MSNightmare released BigDiskBuster, a PoC that exhausts disk space and locks MRT.exe to stop Windows Defender security updates from installing.
42
Microsoft fixes bug behind ‘Defender Antivirus is turned off’ alerts
Microsoft's Defender Antivirus update 4.18.26080.4 fixes false 'Defender Antivirus is turned off' alerts affecting all supported Windows client and server versions.
15
Appears with
- Microsoftvendor · 5
- WhisperGatemalware · 2
- Microsoftorganization · 2
- Huntressorganization · 2
- GootKitmalware · 2
- Trojan:Win32/TermFixmalware · 1
- ClickFixmalware · 1
- Windowsproduct · 1
- Muddled Librathreat actor · 1
- Windows Server 2025product · 1
- Windows 11product · 1
- MRT.exeproduct · 1
- Trojan:Win32/ClickFixmalware · 1
- Nightmare-Eclipseorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.