Summary

A complex campaign of cyberattacks has been discovered that takes advantage of vulnerabilities in Windows systems by combining techniques similar to ClickFix-style attacks with sophisticated obfuscation methods. This abuse of legitimate Microsoft services allows attackers to gain unauthorized access to compromised systems.The attack method involves using legitimate Microsoft services, such as Windows Update and Microsoft Support, to deliver malicious payloads to targeted systems.

Once inside, the attackers can then use various tactics to escalate privileges and gain control over the system.As the threat landscape continues to evolve, it is essential for individuals and organizations to stay vigilant and implement robust security measures to prevent such attacks from occurring. This includes keeping software up-to-date, using antivirus software, and being cautious when clicking on suspicious links or opening attachments from unknown sources.