New ClearFake Campaign Leveraging Proxy Execution to Run PowerShell Commands via Trusted Window Feature

ClearFake is an active, large-scale malware campaign that disguises malicious loaders as fake CAPTCHA prompts on hundreds of compromised websites; victims are socially engineered to execute a legitimate Windows VBScript (SyncAppvPublishingServer.vbs) from the Run dialog, after which staged payloads delivered via a blockchain-hosted JavaScript and a public CDN can perform data theft, remote access, or further malware execution.