Research Saturday

Browser attacks without downloads.


Listen Later

Today we are joined by Nati Tal, Head of Guardio Labs, discussing their work “CAPTCHAgeddon” or unmasking the viral evolution of the ClickFix browser-based threat. CAPTCHAgeddon — Shaked Chen’s deep dive into the ClickFix fake-captcha wave — reveals how a red-team trick morphed into a dominant, download-free browser threat that tricks users into pasting clipboard PowerShell/shell commands and leverages trusted infrastructure, including Google Scripts.

Guardio’s DBSCAN-based payload clustering exposes distinct attacker toolkits and distribution paths — from malvertising and compromised WordPress to social posts and Git repos — and argues defenders need behavioral, intelligence-driven protections, not just signatures.

The research can be found here:

  • “CAPTCHAgeddon” Unmasking the Viral Evolution of the ClickFix Browser-Based Threat
  • Learn more about your ad choices. Visit megaphone.fm/adchoices

    ...more
    View all episodesView all episodes
    Download on the App Store

    Research SaturdayBy N2K Networks

    • 4.4
    • 4.4
    • 4.4
    • 4.4
    • 4.4

    4.4

    8 ratings


    More shows like Research Saturday

    View all
    Risky Business by Patrick Gray

    Risky Business

    369 Listeners

    SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

    SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

    638 Listeners

    Hacked by Hacked

    Hacked

    183 Listeners

    CyberWire Daily by N2K Networks

    CyberWire Daily

    1,018 Listeners

    Smashing Security by Graham Cluley

    Smashing Security

    320 Listeners

    Click Here by Recorded Future News

    Click Here

    416 Listeners

    Darknet Diaries by Jack Rhysider

    Darknet Diaries

    7,961 Listeners

    Cybersecurity Today by Jim Love

    Cybersecurity Today

    173 Listeners

    CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

    CISO Series Podcast

    188 Listeners

    Hacking Humans by N2K Networks

    Hacking Humans

    315 Listeners

    Cyber Security Headlines by CISO Series

    Cyber Security Headlines

    134 Listeners

    Hard Fork by The New York Times

    Hard Fork

    5,505 Listeners

    Search Engine by PJ Vogt

    Search Engine

    4,455 Listeners

    Risky Bulletin by risky.biz

    Risky Bulletin

    43 Listeners

    Hyperfixed by Hyperfixed & Radiotopia

    Hyperfixed

    675 Listeners