Scworld

Revival of Finger Command in ClickFix Malware Attacks

First seen 17 Nov 2025, 20:12 UTC • Blog.Knowbe4

•39.6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Threat actors are exploiting the decades-old 'finger' command in new ClickFix malware attacks to execute remote commands on Windows devices. The command, which was historically used to retrieve user information on Unix and Linux systems, is being repurposed to facilitate remote command execution, raising security concerns for affected systems.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Continue Reading

Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign Kimsuky Exploits South Korean Groupware Vendors with New Gomir Variants Russian GRU Hackers Use Fake CAPTCHAs to Compromise Ukrainian Users Rapid7 Reports Surge in Vulnerability Exploitation Outpacing Patching Efforts ACSC Issues Critical Alert on Exploited CMS Vulnerabilities Cybercriminals Exploit BNB Chain for Malware via Fake CAPTCHAs

Revival of Finger Command in ClickFix Malware Attacks

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading