Threats & Adversaries · Web App Attack

Fake CAPTCHA pages deliver Remcos RAT via SmartApeSG campaign

The prompt instructs victims to paste a ClickFix command into a Run dialog.

1 source · Mar 14

Timeline

• Mar 14 Reported by SANS ISC

Sources

• Mar 14 SANS ISC

  SmartApeSG campaign uses ClickFix page to push Remcos RAT

  SmartApeSG campaign uses ClickFix page to push Remcos RAT, Author: Brad Duncan

  original

Part of the PlainSec briefing for 2026-03-14

Every edition of this story: Fake CAPTCHA pages deliver Remcos RAT via SmartApeSG campaign

More from today

• Iran-aligned actors escalate cyber attacks on US, allies
• Law enforcement dismantles global SocksEscort residential-proxy botnet
• China-linked hackers target Southeast Asian militaries