TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8545
@thehackernews
The Hacker News
Post content
Post content
π ClickFix has moved to Windows Terminal. Microsoft says victims are told to open wt.exe and paste a command from fake CAPTCHA pages. That launches PowerShell, pulls payloads, and injects Lumma Stealer into Chrome and Edge to steal saved credentials. π Read β https://thehackernews.com/2026/03/microsoft-reveals-clickfix-campaign.html