Cybersecurity researchers have identified multiple ClickFix campaigns deploying three new malware loaders: BabaDeda Loader, Lorem Ipsum Loader, and Potemkin. These campaigns use…
Potemkin is a custom x64 loader that uses a domain generation algorithm (DGA) to find its C2 server. It reflectively loads follow-on…
EtherRAT is a remote access trojan (RAT) delivered via the Potemkin loader in ClickFix campaigns. It is used alongside RMMProject for credential…
Huntress is a cybersecurity company that detected the Potemkin loader campaign, which uses ClickFix to deliver EtherRAT and RMMProject. They highlighted the…