— Experts have released a new report examining an incident involving two groups – UNC5518 and UNC5774.
⏺The first group compromises legitimate websites and replaces CAPTCHA pages with "ClickFix" traps, forcing visitors to run commands in Windows Run.
⏺The second group uses the access it gains to deploy the multifunctional malware CORNFLAKE.V3.