Beware of the New ‘Executive Award’ Campaign That Uses ClickFix to Deliver Stealerium Malware

A phishing campaign impersonating an "Executive Award" lures users to a fake HTML form to steal credentials, then delivers a malicious SVG that executes a PowerShell payload via the ClickFix chain to install the Stealerium infostealer; the malware persists, communicates with C2 servers at 31.57.147.77:6464, and uses multiple download endpoints. Organizations are advised to monitor for unusual PowerShell activity, suspicious SVG execution, and network connections to the identified infrastructure, and to block the known malicious IPs.