Fake Zillow pages use ClickFix NetSupport RAT to target apartment hunters
MentionsMicrosoftMicrosoft Windows
EfficientIP Research Labs traced a ClickFix campaign that used fake Zillow apartment-review pages to install NetSupport RAT on visitors’ Windows computers. Each page showed what looked like a routine verification check. Behind it, the page quietly copied a PowerShell command to the clipboard and walked the visitor through pasting and running it.
Summary from Help Net Security.