Cofense
From Fake Amazon Security Alert to HarborWatch Agent: ClickFix Delivery of a Custom Monitoring RAT
Threat actors impersonate Amazon with fake security alerts and lookalike domains to deliver ClickFix malware that installs HarborWatch Agent, a custom monitoring RAT. The campaign uses social engineering and fake verification tactics to trick users into self-infection via email.
AI summary · generated with Claude