19d ago

"The linked JavaScript employs heavy IP filtering to serve the payload, which first prompts the user to click a captcha to 'Verify you are human' followed by 'Verification steps' to open a run command

"The linked JavaScript employs heavy IP filtering to serve the payload, which first prompts the user to click a captcha to 'Verify you are human' followed by 'Verification steps' to open a run command and paste in from the clipboard." Read the full report: https:// thedfirreport.com/2025/07/14/k ongtuke-filefix-leads-to-new-interlock-rat-variant # DFIR # ThreatIntel

1 reportother

Claim audit

No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.

All coverage

"The linked JavaScript employs heavy IP filtering to serve the payload, which first prompts the user to click a captcha to 'Verify you are human' followed by 'Verification steps' to open a run command

mastodon:infosec-exchangeother19d ago kagi ↗

"The linked JavaScript employs heavy IP filtering to serve the payload, which first prompts the user to click a captcha to 'Verify you are human' followed by 'Verification steps' to open a run command and paste in from the clipboard." Read the full report: https:// thedfirreport.com/2025/07/14/k ongtuke-filefix-leads-to-new-interlock-rat-variant # DFIR # ThreatIntel