SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users

Summary

A new banking fraudulent operation is targeting customers of Mexican banks, fintech, payment processors, and cryptocurrency exchanges using ClickFix lures. The activity cluster, tracked by Elastic Security Labs under the moniker REF6045, involves infecting victims through fake CAPTCHA verification pages that deceive them into running a malicious command that installs a PowerShell toolkit dubbed

News Radar provides aggregated summaries. Full content and copyright remain with the original publisher.