Threats & Adversaries · Web App Attack

Fake CAPTCHA Pages Deliver Remcos RAT via SmartApeSG Campaign

The prompt instructs victims to paste a ClickFix command into a Run dialog.

1 source · Mar 14

Timeline

• Mar 14 Reported by SANS ISC

Sources

• Mar 14 SANS ISC

  SmartApeSG campaign uses ClickFix page to push Remcos RAT

  SmartApeSG campaign uses ClickFix page to push Remcos RAT, Author: Brad Duncan

  original

Part of the PlainSec briefing for 2026-03-14

Every edition of this story: Fake CAPTCHA Pages Deliver Remcos RAT via SmartApeSG Campaign

More from today

• Iran-Aligned Actors Escalate Cyber Attacks on US, Allies
• Law Enforcement Dismantles Global SocksEscort Residential-Proxy Botnet
• China-Linked Hackers Target Southeast Asian Militaries