Back Malware-Traffic-Analysis 2026-01-06: SmartApeSG CAPTCHA page uses ClickFix technique for Remcos RAT
Shown above: Example of a legitimate but compromised site showing the SmartApeSG fake CAPTCHA page.
Shown above: HTTPS URLs from the infection run.
Shown above: Traffic from an infection filtered in Wireshark.
Shown above: Remcos RAT infection persistent on an infected Windows host.
to return to the main page.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
