TerminalFix: PNG Steganography, (Mon, Sep 21st)
SANS analyzes the TerminalFix malware campaign, which hides a malicious DLL inside PNG pixel data via steganography and DLL side-loading.
2
Stories per day · 30 days
5 stories, newest first · one card per story
Stories tagged #reverse-tunnel
'TerminalFix' Campaign Weaponizes PowerShell for Enterprise Attacks
A ClickFix-style campaign called TerminalFix weaponizes PowerShell and reverse tunnels to infiltrate enterprise networks in a multistage attack chain.
1
Attack hides malware in PNGs and drops custom reverse tunnel on victims' machines
A ClickFix social engineering wave delivers a multi-stage attack that hides malware in PNG files and installs a custom reverse tunnel.
1
TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse
Microsoft details TerminalFix, a ClickFix variant using fake Cloudflare CAPTCHAs to make users run PowerShell payloads with reverse-tunnel implants.
3
TerminalFix campaign deploys a reverse tunnel through multistage intrusion
Microsoft Threat Intelligence details the TerminalFix campaign, which uses fake CAPTCHA prompts, DLL sideloading, and reverse tunnels in multistage intrusions.
1