Blog • 4w
SmartApeSG Campaign Targets Windows Hosts via ClickFix Social Engineering
The SmartApeSG threat actor group is executing a high-severity social engineering campaign leveraging "ClickFix" scripts to compromise Windows environments. By deploying deceptive browser error messages, fake CAPTCHA prompts, and fraudulent verification pages, the actors manipulate users into executing malicious scripts through manual interaction. These scripts facilitate the deployment of diverse high-impact payloads, specifically Remcos RAT, NetSupport RAT, and the Stealc v2 information stealer. Successful infection provides attackers with persistent remote system control, capabilities for large-scale credential harvesting, and a critical foothold for lateral movement within enterprise networks.
Links:Blog, Cybersecurity News, Isc, Radar, Cisecurity, Broadcom, Socprime, Clavister, Blumira, bleepingcomputer.com, The Register - Security, techcrunch.com, Youtube, Pbs, Timesofindia, Canada, Economictimes, Bankinfosecurity, Cyberscoop, Staffingindustry, Theguardian, Fiia, Pcmag, Zscaler, Cyberpress, Netsecurity, Thehackernews, Proofpoint, Sonicwall, Guptadeepak, Cybelangel, Sentinelone, Github, SecurityWeek, techjacksolutions.com •