#FileFix
PDFを開いてください”に要注意! 「FileFix」によるマルウェア感染の仕組み - ASCII. jp

「FileFix」は、ユーザーが悪意のあるコマンドを実行すると、スクリプトやローダーを経由してLumma Stealerマルウェアに感染する可能性があります
ascii.jp/elem/000/004...
“PDFを開いてください”に要注意! 「FileFix」によるマルウェア感染の仕組み
「FileFix」は、ユーザーが悪意のあるコマンドを実行すると、スクリプトやローダーを経由してLumma Stealerマルウェアに感染する可能性があります。本レポートでは、それぞれの感染フェーズにおける検体の挙動について解説します
ascii.jp
October 23, 2026 at 3:40 AM
FileFixからLumma Stealer感染に至るまでの挙動の解析 | サイバーセキュリティ情報局 https://eset-info.canon-its.jp/malware_info/special/detail/261022.html
October 22, 2026 at 8:25 AM
ClickFix、過去最大の広がり 最も巧妙な誘い文句はAIツール

ClickFixは2024年ごろに登場して以来、急速にサイバー犯罪者の定番手口となりました。件数も種類も増え続けており、FileFix、InstallFix、TerminalFix、さらにブラウザ内で完結するConsentFixなど、派生手法が次々と生まれています。 誘い文句も巧妙化し、標的を絞り込むようになりました
ClickFix、過去最大の広がり 最も巧妙な誘い文句はAIツール
ClickFixは2024年ごろに登場して以来、急速にサイバー犯罪者の定番手口となりました。件数も種類も増え続けており、FileFix、InstallFix、TerminalFix、さらにブラウザ内で完結するConsentFixなど、派生手法が次々と生まれています。 誘い文句も巧妙化し、標的を絞り込むようになりました
blackhatnews.tokyo
October 21, 2026 at 2:25 PM
A new #TYPO3 extension has been published: filefix version 1.0.0, compatible with TYPO3 v12.4.x to v14.9.x
https://extensions.typo3.org/extension/filefix
September 14, 2026 at 3:02 PM
Notícia da BleepingComputer

"New FileFix attack uses cache smuggling to evade security software" #bolhasec
New FileFix attack uses cache smuggling to evade security software
A new variant of the FileFix social engineering attack uses cache smuggling to secretly download a malicious ZIP archive onto a victim's system and bypassing security software.
www.bleepingcomputer.com
January 21, 2026 at 12:30 AM
Notícia da BleepingComputer

"New FileFix attack uses steganography to drop StealC malware" #bolhasec
New FileFix attack uses steganography to drop StealC malware
A newly discovered FileFix social engineering attack impersonates Meta account suspension warnings to trick users into unknowingly installing the StealC infostealer malware.
www.bleepingcomputer.com
October 12, 2025 at 5:30 PM
Notícia da BleepingComputer

"Interlock ransomware adopts FileFix method to deliver malware" #bolhasec
Interlock ransomware adopts new FileFix attack to push malware
Hackers have adopted the new technique called 'FileFix' in Interlock ransomware attacks to drop a remote access trojan (RAT) on targeted systems.
www.bleepingcomputer.com
September 12, 2025 at 9:30 PM
Notícia da BleepingComputer

"Inside a Real Clickfix Attack: How This Social Engineering Hack Unfolds" #bolhasec
Inside a Real Clickfix Attack: How This Social Engineering Hack Unfolds
ClickFix abuses clipboards. FileFix hijacks File Explorer. Both social engineering attacks start in the browser—and end in malware. See how Keep Aware stops these stealthy attacks before they break ou...
www.bleepingcomputer.com
September 2, 2025 at 4:30 PM
Notícia da BleepingComputer

"The Heat Wasn't Just Outside: Cyber Attacks Spiked in Summer 2025" #bolhasec
The Heat Wasn't Just Outside: Cyber Attacks Spiked in Summer 2025
Can your defenses withstand the biggest attacks of Summer 2025? From Interlock's FileFix to Qilin, Scattered Spider, and ToolShell exploits—simulate them all against your organization's defenses with ...
www.bleepingcomputer.com
August 6, 2025 at 12:30 PM
Notícia da BleepingComputer

"Inside a Real Clickfix Attack: How This Social Engineering Hack Unfolds" #bolhasec
Inside a Real Clickfix Attack: How This Social Engineering Hack Unfolds
ClickFix abuses clipboards. FileFix hijacks File Explorer. Both social engineering attacks start in the browser—and end in malware. See how Keep Aware stops these stealthy attacks before they break ou...
www.bleepingcomputer.com
July 31, 2025 at 6:30 PM
Notícia da SecurityWeek

"New Interlock RAT Variant Distributed via FileFix Attacks" #bolhasec
New Interlock RAT Variant Distributed via FileFix Attacks
The Interlock ransomware group has partnered with the KongTuke TDS to distribute a new RAT variant via FileFix attacks.
www.securityweek.com
July 31, 2025 at 2:30 AM
Notícia da BleepingComputer

"New FileFix attack weaponizes Windows File Explorer for stealthy commands" #bolhasec
New FileFix attack weaponizes Windows File Explorer for stealthy commands
A cybersecurity researcher has developed FileFix, a variant of the ClickFix social engineering attack that tricks users into executing malicious commands via the File Explorer address bar in Windows.
www.bleepingcomputer.com
July 17, 2025 at 1:30 AM
Notícia da BleepingComputer

"New FileFix attack runs JScript while bypassing Windows MoTW alerts" #bolhasec
New FileFix attack runs JScript while bypassing Windows MoTW alerts
A new FileFix attack allows executing malicious scripts while bypassing the Mark of the Web (MoTW) protection in Windows by exploiting how browsers handle saved HTML webpages.
www.bleepingcomputer.com
July 14, 2025 at 12:30 AM
The Interlock ransomware group is back with a new PHP-based variant of NodeSnake RAT (aka Interlock RAT), deployed via FileFix. Detect targeted activity across multiple industry sectors with curated Sigma rules from SOC Prime Platform.
socprime.com/blog/interlo...
Interlock Ransomware Detection: Adversaries Deploy a Novel PHP-Based RAT Variant via FileFix | SOC Prime
Detect Interlock ransomware group attacks deploying a new PHP-based RAT via FileFix with curated Sigma rules from SOC Prime Platform.
socprime.com
July 15, 2025 at 4:15 PM
“Innovative FileFix Phishing Attack Proves Plenty Potent” — Dark Reading

#PhishingNews #Phishing
September 16, 2025 at 4:50 PM