SmartApeSG ClickFix Campaign Delivers Unknown RAT
Excerpt
Summary
The SmartApeSG campaign uses the ClickFix technique to trick users into running malicious commands through fake CAPTCHA or human verification pages. This action launches an HTA file that downloads and extracts a malicious ZIP archive. The final payload is an unidentified Remote Access Trojan (RAT) that relies on DLL side-loading to establish persistence and communicate with its C2 infrastructure.
Investigation
The investigation included analysis of HTTPS traffic, PCAP files, and malicious archives linked to SmartApeSG activity. Researchers identified malicious JavaScript injected into legitimate we…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by socprime.com on socprime.com.
On the same topics
- Lorem Ipsum Revisited: ClickFix Pivot & Rapid BrigantineBlueVoyant · Added 25 Oct
- From PostCSS Masquerading to Windows RATJFrog · Published 22 Jun
- Showboat Malware: Emerging Threats Targeting Telecom ProvidersLumen Black Lotus Labs · Added 25 Oct
- International law enforcement initiate hunt on malware group SocGholishDutch National Police · Published 18 Jun
