Fake CAPTCHA Pages Deliver Remcos RAT via SmartApeSG Campaign

The prompt instructs victims to paste a ClickFix command into a Run dialog.

Part of the PlainSec briefing for 2026-03-14

Sources

• SANS ISC