Termite ransomware breaches linked to ClickFix CastleRAT attacks

By Bill Toulas

AI Summary

Velvet Tempest ransomware operators are using ClickFix social engineering techniques combined with legitimate Windows utilities to deploy DonutLoader malware and CastleRAT backdoor in Termite ransomware attacks. This campaign demonstrates the evolution of ransomware delivery methods through deceptive user interaction.

Read full article → https://www.bleepingcomputer.com/news/security/ter…

Relevance score: 85.0/100

# More from March 08

1
Anthropic Finds 22 Firefox Vulnerabilities Using Claude Opus 4.6 AI Model The Hacker News
2
OpenAI Codex Security Scanned 1.2 Million Commits and Found 10,561 High-Severity Issues The Hacker News
4
US Cyber Strategy Targets Adversaries, Critical Infrastructure, and Emerging Technologies SecurityWeek
5
Microsoft: Hackers abusing AI at every stage of cyberattacks BleepingComputer
6
Over 100 GitHub Repositories Distributing BoryptGrab Stealer SecurityWeek
7
Fake Claude Code install guides push infostealers in InstallFix attacks BleepingComputer
8
Multi-Stage VOID#GEIST Malware Delivering XWorm, AsyncRAT, and Xeno RAT The Hacker News
9
CISA adds 3 iOS flaws to its catalog of known exploited vulnerabilities Ars Technica Security
10
North Korean APTs Use AI to Enhance IT Worker Scams Dark Reading