The Human Hack: LummaStealer Returns with Deceptive “ClickFix” Attacks
ID: e67ae11b-fe6f-51e1-9c1d-230b493ce012
STIX ID: report--e67ae11b-fe6f-51e1-9c1d-230b493ce012
Feed Name: securityonline.info
Threat Score
Bitdefender reports a significant resurgence of LummaStealer, a prolific information-stealer offered as MaaS that has shifted from technical exploits to social-engineering 'ClickFix' fake CAPTCHA prompts that persuade users to paste and execute malicious commands; campaigns rely on the CastleLoader delivery tool to swap payloads and evade detection, and researchers advise strengthening user awareness, behavioral monitoring, and rapid response to credential compromise.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.