> TritonInfoSec News
Home / Sep 01, 2026 / Story
0
#5 BleepingComputer general August 31, 2026 at 18:51 UTC

Microsoft warns of TerminalFix attacks deploying reverse tunnels

By Bill Toulas

AI Summary

Microsoft has documented a new ClickFix variant called TerminalFix that uses fake Cloudflare CAPTCHA prompts on compromised websites to lure victims into executing malicious PowerShell commands in Windows Terminal, subsequently deploying reverse tunnels into victim enterprise networks. The multi-stage attack chain represents an evolution of social engineering lures targeting enterprise environments where Windows Terminal is a trusted tool.

Read full article → https://www.bleepingcomputer.com/news/security/mic…

Relevance score: 82.0/100

# More from September 01

  1. 1
    McKesson Confirms Data Breach as Attacker Deadline Looms SecurityWeek
  2. 2
    Berlin confirms data theft after Rhysida ransomware attack claims BleepingComputer
  3. 3
    China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs The Hacker News
  4. 4
    More Details Emerge on Exploited PaperCut Vulnerabilities SecurityWeek
  5. 6
    ServiceNow Patches 3 Critical Code Injection Vulnerabilities SecurityWeek
  6. 7
    ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions The Hacker News
  7. 8
    Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets The Hacker News
  8. 9
    Critical Ruby on Rails Vulnerability in Attackers’ Crosshairs SecurityWeek
  9. 10
    DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims The Hacker News