'Lorem Ipsum' Malware Pivots to ClickFix Delivery
ID: a59a7510-d2a8-5e4f-a1e4-d60cd99f74b1
STIX ID: report--a59a7510-d2a8-5e4f-a1e4-d60cd99f74b1
Feed Name: Dark Reading
Threat Score
BlueVoyant observed the Lorem Ipsum campaign—linked to ransomware actor Rapid Brigantine—pivot from using fraudulently signed Trojanized Microsoft Teams installers to ClickFix social-engineering lures hosted on compromised WordPress sites after Microsoft dismantled the Fox Tempest signing service, expanding the attack surface and underscoring the need for behavioral detections over static indicators.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.