Gen Digital exposes a Claude malware campaign on claude.ai. This fake Download Claude malware campaign uses Google Ads and ClickFix to drop AMOS.
#ClaudeAI #AMOS #ClickFix #GenDigital #Malvertising #macOSMalware #Cybersecurity
XFEDI
ActivityPub#ClickFix
Public posts with this hashtag.
An Amazon ClickFix campaign uses a fake CAPTCHA and the old Windows finger command to drop Lumma Stealer and NetSupport. Stay protected.
#ClickFix #Amazon #Malvertising #LummaStealer #NetSupport #LOLBin #Huntress #Cybersecurity
Chrome ClickFix protection in Enhanced Protection flags risky clipboard commands and uses cloud Gemini AI to block scam sites.
#Chrome #ClickFix #EnhancedProtection #SafeBrowsing #Gemini #Phishing #PowerShell #WebSecurity
Forescout detailed ROMULUS, a ClickFix delivery platform distributing Legion Loader. It industrializes social-engineered execution, making initial access scalable and harder to detect. Review controls for user-executed commands. #ClickFix #LegionLoader #ThreatIntel
https://cyberworldops.eu/en/romulus-turns-clickfix-lures-into-a-delivery-pipeline-for-legion
CyberWorldOpsROMULUS Turns ClickFix Lures Into Legion Loader DeliveryForescout Vedere Labs describes ROMULUS, a delivery platform using ClickFix lures and PowerShell to install Legion Loader for further payloads.
🤖 Forescout's Vedere Labs documents ROMULUS, a ClickFix delivery platform run like a malware-as-a-service: bogus landing pages trick visitors into pasting and running PowerShell, dropping LegionLoader and other families, with payloads rotated per campaign.
🔗 https://thehackernews.com/2026/10/romulus-clickfix-platform-tricks-users.html
#Malware #ClickFix #InfoSec
The Hacker NewsHackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other MalwareROMULUS uses ClickFix lures and PowerShell scripts to deliver malware, including Legion Loader, across infrastructure spanning six IP addresses.
Siemens Software Center vulnerability CVE-2026-110936 is exploited in the wild by ClickFix attackers via DLL sideloading. Update to 4.0.9.8.
#Siemens #SiemensSoftwareCenter #CVE2026110936 #ExploitedInTheWild #ClickFix #DLLSideloading #Malware #CyberSecurity