A newly observed social engineering wave tied to the Lazarus constellation is exploiting the seasonal rush for remote cryptocurrency jobs.
Dubbed “ClickFix”, the lure refines the earlier ClickFake Interview playbook by introducing a new repair-tool twist that incorporates a bespoke Go backdoor, which the Sekoia TDR team...
A sophisticated phishing campaign has been detected leveraging the domain ypp-studiocom to deliver the notorious Rhadamanthys infostealer, marking a new escalation in phishing and malware delivery tactics.
Using advanced evasion methods and a novel ClickFix CAPTCHA delivery mechanism, this campaign poses a significant risk to individuals...