Contagious Interview Operation is a threat campaign observed in association with the CrashFix activity, which hijacks browser failure events to deliver the ModelRAT malware through a fake Chrome extension.
Contagious Interview Operation is a threat campaign observed in association with the CrashFix activity, which hijacks browser failure events to deliver the ModelRAT malware through a fake Chrome extension. The operation underscores abuse of the browser extension ecosystem and user trust to deploy remote access capabilities on endpoints. Its significance lies in showing how attackers leverage legitimate browser processes to slip in malware and establish control on victims’ machines.
A malicious campaign named CrashFix has been identified, utilizing a fake ad-blocking browser extension called NexShield to crash users' browsers. This tactic is employed to facilitate ClickFix attacks, delivering a new…