CISA has added one of a pair of code injection vulnerabilities to the KEV catalogue as experts warn, “this is not a drill”.
ClickFix uses fake CAPTCHAs and a signed Microsoft App-V script to deploy Amatera stealer on enterprise Windows systems.