AdvisoryWindows Terminal
TerminalFix ClickFix Variant Deploys Reverse-Tunnel Backdoor via Fake Cloudflare CAPTCHAs
Microsoft has detailed TerminalFix, a ClickFix variant that lures victims via fake Cloudflare CAPTCHAs into running PowerShell commands in Windows Terminal, ultimately deploying a Python-based reverse-tunnel implant that gives attackers persistent network access.