New ClickFix attack deploys Havoc C2 via Microsoft Sharepoint

Published on March 3, 2025

A newly uncovered ClickFix phishing campaign is tricking victims into executing malicious PowerShell commands that deploy the Havok post-exploitation framework for remote access to compromised devices. [...]

Continue reading on website
Other news

Hackers Exploit AWS Misconfigurations to Launch Phishing Attacks via SES and WorkMail

March 3, 2025
Threat actors are targeting Amazon Web Services (AWS) environments to push out phishing campaigns to unsuspecting targets, according to findings from Palo Alto Networks Unit 42.The cybersecurity company is tracking the activity cluster under the name TGR-UNK-0011 (short for a threat group with unknown motivation), which it said overlaps with a group known as JavaGhost. TGR-UNK-0011 is known to

CISA tags Windows, Cisco vulnerabilities as actively exploited

March 3, 2025
CISA has warned US federal agencies to secure their systems against attacks exploiting vulnerabilities in Cisco and Windows systems. [...]