Fake Temu Coin airdrop uses ClickFix trick to install stealthy malware

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ClickFix Scam Targets Users with Fake $TEMU Airdrop and Stealthy Malware A fake $TEMU cryptocurrency airdrop has been reported, utilizing the ClickFix trick to deceive victims into executing malware on their systems. This malware installs a remote-access backdoor, allowing attackers to gain unauthorized access. The scam targets users interested in cryptocurrency, particularly those engaging with Temu. The method involves social engineering tactics that encourage users to run the malware themselves, significantly increasing the risk of infection. The scope of the impact is currently unclear, but it poses a serious threat to users who may be lured by the promise of free cryptocurrency. Both articles highlight the same attack vector and emphasize the stealthy nature of the malware. As of now, no specific numbers of affected users or systems have been disclosed. Security experts recommend vigilance against such scams and advise users to verify the legitimacy of airdrop offers. 2 sources 49