THE page highlights the detection of four critical vulnerabilities (CVE-2025-67038, CVE-2026-34910, CVE-2026-34909, and CVE-2026-34908) and details a SmartRAT ClickFix malware campaign operated by suspected Brazilian cybercriminals. The malware targets customers of major Brazilian banks, utilizing AI-generated typosquatting domains to impersonate legitimate banking websites. Key infection methods include deploying malicious commands through fake error messages, which lead to remote access and data exfiltration.
The malware establishes persistence and communicates with a command-and-control server while monitoring for bank-related activity to capture user credentials. Defense strategies involve blocking typosquatting domains, monitoring for unusual activity, and educating users against phishing tactics.