New WordlistLoader Hides Malicious Shellcode in English Words to Deploy Amatera Stealer

Gen Threat Labs has uncovered WordlistLoader, a new malware loader used in ClearFake campaigns to deliver the Amatera Stealer. The campaign abuses compromised legitimate websites to display fake CAPTCHA checks. Victims are told to prove they are human, but the process instead tricks them into copying and running a malicious command. The fake...