Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://infosec.exchange/users/decio/statuses/113458938203482067">:mastodon: decio (decio@infosec.exchange)'s status on Tuesday, 30-Dec-2025 00:23:24 JST</a><a href="https://infosec.exchange/@decio" title="decio@infosec.exchange"><img src="https://gnusocial.jp/avatar/299111-48-20250626135528.webp" width="48" height="48" alt=":mastodon: decio" style="position: absolute; left: 0; top: 0;">:mastodon: decio</a><div><a href="https://infosec.exchange/@decio/113396626251792557" rel="in-reply-to">in reply to</a></div></section><article><p>Hélas, cette technique d'ingénierie sociale, ClickFix, qui pousse les utilisateurs à copier-coller des commandes, fonctionne. Dernièrement, on recense plusieurs signalements dans les forums et auprès des centres de compétence en cybersécurité.<br>👇 <br><a href="https://infosec.exchange/@malmoeb/113458752985336077">https://infosec.exchange/@malmoeb/113458752985336077</a></p><p>Confirmé par des chercheurs spécialisés en malware, cette méthode est de plus en plus utilisée par divers acteurs malveillants pour initier le premier stade de compromission.<br>👇 <br><a href="https://ioc.exchange/@ineiti/113436360526528208" rel="nofollow">https://ioc.exchange/@ineiti/113436360526528208</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/6002083#notice-11810486">In conversation</a><time datetime="2025-12-30T00:23:24+09:00" title="Tuesday, 30-Dec-2025 00:23:24 JST">about 10 months ago</time> <span>from <span><a href="https://infosec.exchange/@decio/113458938203482067" rel="external" title="Sent from infosec.exchange via ActivityPub">infosec.exchange</a></span></span><a href="https://infosec.exchange/@decio/113458938203482067">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: media.infosec.exchange</div><h5><a href="https://infosec.exchange/@malmoeb/113458752985336077Confirm%C3%A9">Stephan Berger (@malmoeb@infosec.exchange)</a></h5><div> from <span>Stephan Berger</span></div></header><div>Attached: 4 imagesLumma Stealer is pretty successful with the FAKE CAPTCHA  campaign (screenshot below, image from [1]), given what we are seeing in our SOC and the multiple cries for help in various forums (from Reddit to Microsoft).[1] https://blog.qualys.com/vulnerabilities-threat-research/2024/10/20/unmasking-lumma-stealer-analyzing-deceptive-tactics-with-fake-captcha</div><footer></footer></article></li><li><article><header><div>Domain not in remote thumbnail source whitelist: files.ioc.exchange</div><h5><a href="https://ioc.exchange/@ineiti/113436360526528208">ineiti (@ineiti@ioc.exchange)</a></h5><div> from <span>ineiti</span></div></header><div>Attached: 1 image#BlackAlps24 laugh: how can you get infected with a captcha? Answer: "copy paste this command to your terminal to prove you're human"Speaker: you'll be surprised how often that works...</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
:mastodon: decio (decio@infosec.exchange)'s status on Tuesday, 30-Dec-2025 00:23:24 JST :mastodon: decio
in reply to
Hélas, cette technique d'ingénierie sociale, ClickFix, qui pousse les utilisateurs à copier-coller des commandes, fonctionne. Dernièrement, on recense plusieurs signalements dans les forums et auprès des centres de compétence en cybersécurité.
👇
https://infosec.exchange/@malmoeb/113458752985336077
Confirmé par des chercheurs spécialisés en malware, cette méthode est de plus en plus utilisée par divers acteurs malveillants pour initier le premier stade de compromission.
👇
https://ioc.exchange/@ineiti/113436360526528208
In conversationabout 10 months ago from infosec.exchangepermalink
Attachments
1. Domain not in remote thumbnail source whitelist: media.infosec.exchange
  Stephan Berger (@malmoeb@infosec.exchange)
  from Stephan Berger
  Attached: 4 images Lumma Stealer is pretty successful with the FAKE CAPTCHA campaign (screenshot below, image from [1]), given what we are seeing in our SOC and the multiple cries for help in various forums (from Reddit to Microsoft). [1] https://blog.qualys.com/vulnerabilities-threat-research/2024/10/20/unmasking-lumma-stealer-analyzing-deceptive-tactics-with-fake-captcha
2. Domain not in remote thumbnail source whitelist: files.ioc.exchange
  ineiti (@ineiti@ioc.exchange)
  from ineiti
  Attached: 1 image #BlackAlps24 laugh: how can you get infected with a captcha? Answer: "copy paste this command to your terminal to prove you're human" Speaker: you'll be surprised how often that works...

Public

Embed Notice

HTML Code

Corresponding Notice