Cybercriminals have been exploiting a rarely-used protocol in attacks against Microsoft users. Here’s what you need to know as hackers give Windows the finger.
Cybercriminal hackers will try anything to get their potential victims to give up their account credentials and, ultimately, their data. From asking X users to review their tweets with ato entrap unwitting users.
But one of the most commonplace threats currently employed by attackers uses the least commonplace of technical tactics. Here’s how hackers are giving Microsoft Windows users the finger, and why you need to take it very seriously indeed.by Lawrence Abrams, editor in chief at Bleeping Computer, hackers are using the most unlikely of technical tactics to entrap users of Microsoft Windows. And with excellent success rates, it would appear. Cybercriminals are many things, but stupid is not generally one of them. They certainly would not waste their precious time on an ineffective attack strategy. The attacks in question are not new, far from it in fact. We are talking about Where does hackers giving Microsoft raw finger come into all of this? “The decades-old finger command is making a comeback,” Abrams warned, “with threat actors using the protocol to retrieve remote commands to execute on Windows devices.” ClickFix uses what you might think of as a rather complicated and obtuse method of social engineering, getting the user to employ a fake captcha verification system that requires them to, wait for it, cut and paste commands into the Windows run dialog. “Recently, there have been malicious campaigns utilizing the Finger protocol in what appear to be ClickFix attacks that retrieve commands to execute on devices,” Abrams said. He went on to explain that executing the finger command can provide an attacker with information such as login name, name (home directory, phone numbers, last seen, and more. “While the current finger abuse appears to be carried out by a single threat actor conducting ClickFix attacks,” Abrams concluded, “as people continue to fall for them, it is essential to be aware of the campaigns.” To which I would add, if a captcha asks you to open a Microsoft Windows run dialog and enter commands, run for the hills. This is not normal behavior, and there’s no reason on earth why a captcha verification should ask you to do such a thing.
Finger Hackers Clickfix Windows Attack Finger Protocol Finger Command CAPTCHA Authentication Warning Infosecurity Alert
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Critical Microsoft Alert — Update Windows 10, 11 And Server Right NowMicrosoft has confirmed a zero-day vulnerability in the Windows Kernel that attackers have already exploited to gain system privileges. Act now.
Read more »
Evacuation warnings issued in California over atmospheric river flood threatOver 30 million under flash flood risk in California
Read more »
Creative Directors Come and Go, but Dior’s Holiday Windows Are TimelessDior's holiday windows underscore continuity amid recent changes in creative direction, with brand codes linked to founder Christian Dior.
Read more »
Travel Warning Issued for Hundreds of Thousands Across Three StatesUp to two tenths of an inch of ice could coat roadways in the Northeast this weekend.
Read more »
Flash flood warning issued as atmospheric river hits Southern CaliforniaAn unusually strong storm system called an atmospheric river was dousing Southern California on Saturday, prompting flood warnings in areas of coastal Los Angeles County that recently were ravaged by wildfires. The National Weather Service in Los Angles and Oxnard reported heavy rainfall Saturday at rates as heavy as an inch (2.
Read more »
Trump immigration crackdown targets new city: Businesses close as windows broken and protests beginWorkers were hanging Christmas lights in a yard when agents approached them.
Read more »