Find a story
Search Spins
Search titles, summaries, and missing voices across published articles — press releases, announcements, and media coverage.
0 results for “PowerShell”
Placeholder domain used in dev docs now serves ClickFix attacks
A widely used placeholder domain ('third-party.com') in developer documentation has been weaponized to deliver ClickFix malware via a fake Cloudflare verification page targeting Windows users.
Sep 24, 2026
TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data
A newly disclosed PowerShell-based backdoor named TASK#STOMP is actively harvesting business documents, Wi-Fi credentials, clipboard data, and screenshots from compromised Windows systems, representing an operational cyber threat with real-world data exfiltration capabilities.
Sep 21, 2026
'TerminalFix' Campaign Weaponizes PowerShell for Enterprise Attacks
A new cyberattack campaign named 'TerminalFix' uses PowerShell to execute multistage intrusions into enterprise networks, including reverse-shell tunnels, mimicking the tactics of the previously observed ClickFix campaign.
Sep 1, 2026
TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor
Microsoft disclosed a new malware variant called TerminalFix that abuses Windows Terminal or PowerShell by tricking users into executing malicious commands via fake Cloudflare CAPTCHAs, representing an evolution in social-engineering-based reverse-tunnel backdoor deployment.
Aug 30, 2026
Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory
An unknown threat actor used a PowerShell script exhibiting characteristics suggestive of AI-assisted coding ('vibe-coded') to enumerate and map Active Directory infrastructure, raising concerns about AI's role in lowering the barrier to sophisticated cyberattacks.
Jul 13, 2026
SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users
A new banking malware campaign dubbed SCMBANKER uses fake ClickFix CAPTCHA lures to target Mexican financial users, delivering a PowerShell-based toolkit tracked as REF6045.
Jul 9, 2026