WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...
Twenty-four malicious npm packages have been used to turn trusted package mirrors into staging points for ClickFix phishing ...