PULSE NAME
Fake CAPTCHA / ClickFix Chain Using PowerShell, MSHTA, and an Evasive Payload
WHITE mengkuong 2025-12-01 Modified: 2025-12-22
15
IOCs
MEDIUM VOLUME
Key Takeaway: This campaign demonstrates how threat actors are increasingly adopting low-noise execution chains paired with heavily evasive payloads to bypass dynamic analysis and automated detection.