Placeholder domain used in dev docs now serves ClickFix attacks
Teaser from the source
The "third-party.com" domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloudflare verification page that attempts to trick Windows users into executing PowerShell commands. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on ClickFix
Other advisories
Other news entries
- Yet Another ClickFix Campaign, (Wed, Oct 28th)NewsSANS ISC Diary
- Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacksNewsBleepingComputer
- Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP ConnectionsNewsSecurityWeek
- ClickFix has never been bigger, and AI tools are its most convincing lure yetNewsBleepingComputer
- Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious CommandsNewsThe Hacker News
- Decades-Old Windows Utility Powers Modern ClickFix AttackNewsDark Reading
- ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access TrojanNewsThe Hacker News
- Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other MalwareNewsThe Hacker News
ID