Security · 3h ago
SCMBANKER Malware Targets Mexican Banks via Fake CAPTCHA Lures
A new malware campaign dubbed REF6045 targets Mexican banking users with ClickFix lures. Victims are tricked by fake CAPTCHA pages into running a PowerShell command that installs the SCMBANKER toolkit. The malware targets banks, fintech, payment processors, and crypto exchanges.
Meridian48 take
The use of fake CAPTCHA pages as a delivery mechanism is a clever social engineering twist, but the core threat is a familiar banking trojan.
Read the full reporting
SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users →
The Hacker News
banking-malwaresocial-engineering