
Documentation placeholder domain used in ClickFix attacks
Placeholder domain third-party.com is serving ClickFix lures that execute remote PowerShell on Windows.
2
2 stories, newest first · one card per story

Placeholder domain third-party.com is serving ClickFix lures that execute remote PowerShell on Windows.

Attackers registered documentation placeholder domain third-party.com and used it to serve Windows users a ClickFix fake-CAPTCHA page pushing a PowerShell downloader.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views