
Microsoft Warns of TerminalFix: New ClickFix Variant Exploiting Windows Terminal and PowerShell
CybersecurityMalwareSocial EngineeringBackdoors
Microsoft disclosed a new ClickFix variant called TerminalFix that tricks users into executing malicious commands in Windows Terminal or PowerShell. Unlike traditional ClickFix campaigns that target the Windows Run dialog, TerminalFix directs victims to Terminal or PowerShell, increasing the likelihood of executing complex commands. The attack leverages fake Cloudflare CAPTCHAs to deploy a reverse-tunnel backdoor.