Microsoft Warns of TerminalFix Malware Using Fake Cloudflare CAPTCHA to Deploy Reverse Tunnels

A new ClickFix variant named TerminalFix uses fake Cloudflare CAPTCHA prompts on compromised websites to deceive victims into executing malicious PowerShell commands in Windows Terminal. The attack involves deploying reverse tunnels as part of its payload. Microsoft has issued a warning regarding this threat.