highCyber Attacks
Microsoft Warns of TerminalFix ClickFix Variant Deploying Reverse Tunnels via Fake Cloudflare CAPTCHA
Microsoft has issued a warning about a new ClickFix variant named TerminalFix. Attackers compromise websites to display fake Cloudflare CAPTCHA prompts. When users interact with these prompts, they are tricked into running malicious PowerShell commands within Windows Terminal. These commands establish reverse tunnels, providing threat actors with remote access and control over the compromised systems. The campaign leverages social engineering techniques to bypass traditional security measures.
BleepingComputer1 min read
