Microsoft revealed information about a new iteration of the ClickFix social engineering technique, in which the attackers fool gullible victims into executing commands that perform a DNS lookup in order to obtain the subsequent payload.
The attack specifically uses the “nslookup” command, which stands for “nameserver lookup,” to do a custom DNS lookup that is initiated via the Windows Run dialog.
ClickFix is a growingly common technique that is typically distributed through drive-by download schemes, phishing, or malvertising. It frequently directs victims to fraudulent landing pages that display phony CAPTCHA verification or instructions to fix a computer issue that doesn’t exist by executing a command via the macOS Terminal application or the Windows Run dialog.
Over the past two years, the assault technique has proliferated since it relies on the victims infecting their own computers with malware read more about Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware Staging.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.