Russia-linked APT28, Iran-linked MuddyWater, and other cybercriminals are escalating their use of the ClickFix social engineering technique since August, deploying malware through malicious emails and redirecting users to fraudulent sites, according to Group-IB researchers. Hospitality organizations globally have been targeted by a ClickFix attack campaign involving spoofed Booking.com content.

BSI Warns Of New Captcha Scam Spreading Malware
Cybercriminals are exploiting Captchas, symbols of online security, to trick users into downloading malicious software, warns the Bundesamt für Sicherheit und Informationstechnik (BSI). This new