Hackers are using ClickFix tricks to install malware loaders and Python tunnels on Windows systems, creating access that could support ransomware attacks. A late September incident shows how a user running a command can start an infection chain built around trusted Microsoft programs, hidden code, and encrypted network traffic. The attack was... Weiterlesen: Hackers Use ClickFix and Python Tunnels to Prepare Systems for Ransom…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Use ClickFix and Python Tunnels to Prepare Systems for Ransomware Attacks
Hackers are using ClickFix tricks to install malware loaders and Python tunnels on Windows systems, creating access that could support ransomware attacks. A…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
36 Quellen
CVE-2026-72072 | Linux Kernel up to 7.2-rc1 macsec net/mlx5e macsec_del_rxsc_ctx use after free (Nessus ID 369276)
35 weitere Quellen
VVulDB Updates5 uur geledenCVE-2026-72123 | Linux Kernel up to 7.2-rc3 bcm bcm_delete_rx_op sk use after free (Nessus ID 369276) VVulDB Updates5 uur geledenCVE-2026-72251 | Linux Kernel up to 7.2-rc2 nf_nat_sip.c nf_nat_sip buffer overflow (Nessus ID 369276) VVulDB Updates5 uur geledenCVE-2026-72135 | Linux Kernel up to 7.2-rc2 TPM Character Device tpm_common_read off out-of-bounds (Nessus ID 369276) VVulDB Updates5 uur geledenCVE-2026-72288 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc3 vgic vgic_prune_ap_list use after free (Nessus ID 369276) VVulDB Updates5 uur geledenCVE-2026-74345 | Linux Kernel up to 6.12.96/6.18.39/7.1.4 siw siw_cm.c siw_cm_work_handler use after free (Nessus ID 369276) VVulDB Updates5 uur geledenCVE-2026-74377 | Linux Kernel up to 7.1.4 rxe rxe_resp_check_length out-of-bounds (Nessus ID 369276)
+29
11 Quellen
CVE-2020-25720 | Samba LDAP improper authorization (EUVD-2020-18374)
10 weitere Quellen
VVulDB Updates7 uur geledenCVE-2026-114361 | HarnessRouter up to 0.31.10 Identity Mode gateway/app.py X-Harness-Org/X-Harness-Member improper authorization (GHSA-qrr8-m92f-7vfp / EUVD-2026-107496) VVulDB Updates6 uur geledenCVE-2026-114135 | Jupyter Server up to 2.5.x GatewayClient GatewayClient.url is_authorized authorization (EUVD-2026-107544) VVulDB Updates5 uur geledenCVE-2026-111699 | Niefy wx-api up to 0.8.2 Fan Controller /wxUser/getUserInfo openid improper authentication (EUVD-2026-102990) VVulDB Updates5 uur geledenCVE-2026-111689 | Exrick XBoot up to 3.3.4 getByDepartmentId departmentId authorization (EUVD-2026-102980) VVulDB Updates5 uur geledenCVE-2026-101640 | Oracle Marketing up to 12.2.15 Audience improper authorization (EUVD-2026-106048) VVulDB Updates5 uur geledenCVE-2026-101660 | Oracle Mobile Field Service up to 12.2.15 Admin UI improper authorization (EUVD-2026-106065)
+4
9 Quellen
GitHub Release: openai/codex vrust-v0.164.0-alpha.10 (22.10.2026)
8 weitere Quellen
GGitHub5 uur geledenGitHub Release: anthropics/claude-code v2.1.307 (22.10.2026) GGitHub3 uur geledenGitHub Release: ollama/ollama v0.40.9-rc1 (22.10.2026) GGitHub6 uur geledenGitHub Release: openclaw/openclaw vrelease-publish/59518bfd2a15-1792626457 (21.10.2026) GGitHub6 uur geledenGitHub Release: openai/codex vrust-v0.163.0-alpha.11.1 (21.10.2026) GGitHub7 uur geledenGitHub Release: ollama/ollama v0.40.9-rc0 (21.10.2026) GGitHub5 uur geledenGitHub Release: telegramdesktop/tdesktop v7.3.3 (21.10.2026)
+2
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4274210/malware-trojaner-viren/hackers-use-clickfix-and-python-tunnels-to-prepare-systems-for-ransomware-attacks/