Fake Cloudflare CAPTCHA Powers AI‑Generated ClickFix Attack Delivering SmartRAT
ThreatLabz uncovered an AI‑crafted phishing site that mimics a Cloudflare CAPTCHA, coercing users to run an obfuscated PowerShell dropper. The script fetches and installs SmartRAT, a remote‑access trojan capable of credential theft and full system control. This shows how cheap AI tools can mass‑produce convincing lures that bypass traditional defenses.