Cybercriminals Deploy CORNFLAKE.V3 Backdoor via ClickFix Tactic and Fake CAPTCHA Pages

Threat actors associated with Mandiant's UNC5518 group are utilizing the ClickFix social engineering tactic to distribute the CORNFLAKE.V3 backdoor, a versatile malware payload. This campaign employs fake CAPTCHA pages as lures to deceive users into granting initial system access, facilitating an access-as-a-service scheme that enables persistent and flexible cyber intrusions.