ClickFix Attack Hides VBScript Payload in Browser Cache
ClickFix sites stage a VBScript payload in the browser cache to bypass the Run dialog's length limit
Fonte unica
Nessun'altra testata seguita da Zonactu riporta ancora questa notizia.
A ClickFix campaign has been observed hiding a VBScript payload in the browser cache, disguised as an image, so the script was already on the device when the victim was tricked into running a command through Windows Run.
Microsoft Threat Intelligence described the technique in a post on X on October 3 , saying a cluster of compromised websites was leading visitors to the attacks.
