Vulnerabilityhigh
ClearFake Infects 9,300 Sites, Uses Fake reCAPTCHA and Turnstile to Spread Info
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-0199 | Remote Code Execution in Microsoft Office and WordPad via crafted document files | 7.8 | 99% | KEVRansomwarePoC ×6 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | idostream.com | n attack. The video service in question is LES Automotive ("idostream[.]com"), which has since removed the malicious JavaScript injec |
From the original article
4 min read at thehackernews.com
Ravie Lakshmanan Mar 19, 2025 Cloud Security / Web Security The threat actors behind the ClearFake campaign are using fake reCAPTCHA or Cloudflare Turnstile verifications as lures to trick users into downloading malware such as Lumma Stealer and Vidar Stealer.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.