Microsoft Warns TerminalFix ClickFix Campaign Uses Fake CAPTCHA to Deploy Reverse Tunnel

A TerminalFix campaign, a ClickFix variant, is using fake Cloudflare CAPTCHA prompts to trick users into executing PowerShell commands that install a reverse-tunnel implant. Documented by Microsoft, the activity targets organizations and can turn a compromised Windows device into a network pivot point for attackers. The infection begins on...