Cofense

From Fake Amazon Security Alert to HarborWatch Agent: ClickFix Delivery of a Custom Monitoring RAT

PhishingHighphishing

Threat actors impersonate Amazon with fake security alerts and lookalike domains to deliver ClickFix malware that installs HarborWatch Agent, a custom monitoring RAT. The campaign uses social engineering and fake verification tactics to trick users into self-infection via email.

AI summary · generated with Claude

https://cofense.com/blog/from-fake-amazon-security-alert-to-harborwatch-agent-clickfix-delivery-of-a-custom-monitoring-rat