An AI-generated SmartRAT ClickFix campaign targets banking users, mimicking the Banana RAT. This threat relates to flaws like CVE-2026-26980.
ClickFix Campaign
Rapid7 exposes a global ClickFix campaign hijacking WordPress sites with fake Cloudflare CAPTCHAs to deliver stealthy infostealers and drain digital wallets.
Elastic Security Labs uncovers a ClickFix campaign turning human helpfulness into a weapon. Fake verifications deploy the fileless MIMICRAT via PowerShell.