Skip to main content

Tag: powershell malware

2 articles

Windows desktop with browser open on cluttered desk, displaying fake CAPTCHA prompt.

Malicious Site Exploits Placeholder Domain to Target Windows Users

This sneaky malicious site uses a simple yet effective trick to target Windows users, pretending to be a harmless CAPTCHA verification process while secretly loading a PowerShell command that puts users at risk. By tailoring its attack to only Windows users, the site's operators increase the likelihood of a successful exploit.

Analyst 207
Mexican bank branch interior with concerned customer on smartphone.

SCMBANKER Malware Targets Mexican Banking Users with ClickFix Lures

Mexican banking customers beware: a sneaky new malware campaign, dubbed REF6045, is using fake CAPTCHA pages and social tricks to install a powerful PowerShell toolkit called SCMBANKER on unsuspecting victims' devices. This stealthy attack has been targeting Mexico's financial ecosystem, putting fintech users, payment-processor clients, and cryptocurrency exchange customers at risk.

Analyst 207