الأحد 26 يوليو 2026 09:50:46 GMT+02:00
Netcrook
#REF6045
Fake CAPTCHA, Real Command: The Mexican Finance ClickFix Trap
A browser-looking verification prompt can become the handoff point for a malicious PowerShell run, turning routine trust into a user-execution attack path.
Fake Verification, Real Fraud: How a Single Windows Prompt Can Tip a Banking Session
A human-operated fraud campaign tied to REF6045 is using SCMBANKER and a browser-based lure to push victims toward command execution, turning social engineering into a path for account takeover and payment diversion.