Ransomware threat actors tracked as Velvet Tempest are using the ClickFix technique and legitimate Windows utilities to deploy the DonutLoader malware and the CastleRAT backdoor.

© 2026 Forbes Media LLC. All Rights Reserved.

Computer engineers and programmers have long relied on reverse engineering as a way to copy the functionality of a computer ...

The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...

Threat actors are employing a new variation of the ClickFix social engineering technique called InstallFix to convince users ...

Dubbed InstallFix by Push Security, the scheme inserts instructions to download malware during the Claude Code install process on cloned websites.