New ‘Point-and-Click’ Phishing Kit Evades Security Filters to Deliver Malicious Payloads

A new toolkit named Impact Solutions has emerged on cybercrime forums, offering a comprehensive, user-friendly framework for crafting advanced phishing campaigns. By democratising malware delivery, Impact Solutions empowers even low-skill threat actors to bypass both end users and conventional security filters, delivering malicious payloads via seemingly innocuous attachments.

The toolkit is promoted as an all-in-one payload delivery platform that automates the creation of weaponised files, with modules including Windows shortcut (.lnk) attachments, self-contained HTML files for HTML smuggling, malicious SVG images with embedded scripts, and payloads that exploit the Windows Win+R Run dialog trick (also known as Clickfix).

The .lnk builder is described as sophisticated, letting attackers decoy a file such as a PDF invoice while the shortcut points to an executable payload, launching the downloader in the background and displaying the genuine document to mislead victims.

Additional features cover multi-stage HTML attacks, Base64-encoded PowerShell commands, and techniques to bypass UAC prompts and evade sandbox analysis, with claims that it can slip past Microsoft SmartScreen and most antivirus engines without code-signing certificates, according to Report.