\u201cIt\u2019s all fun and games until someone gets hurt\u201d could well be the title of the latest ESET Threat Report, as cybercriminals play new mind games with their victims, wage full-on deathmatches among themselves, and become the hunted game of law enforcement and private vendors.<\/p>\n
ESET Distinguished Researcher Aryeh Goretsky<\/a> and Security Awareness Specialist Ondrej Kubovi\u010d<\/a> open this installment of the ESET Research Podcast by breaking down the latest cry among threat actors: ClickFix. They explain how this technique went from non-existent a year ago to the second most prevalent threat today, and why it\u2019s so effective. They also examine a specific example of this social engineering tactic FakeCaptcha, abusing the well-known human verification mechanism and weaponing it trick victims into executing malicious commands.<\/p>\n Moving from emerging threats to positive developments, the second segment highlights recent law enforcement disruptions of infostealers. Noteworthy cases from last 12 months include takedown of Redline\/Meta Stealer in late 2024 and recent operations against LummaStealer <\/a>and Danabot<\/a>. Aryeh and Ondrej discuss what made these infostealer-as-a-service ventures attractive to affiliates, the impact of the disruptions, and ESET research\u2019s specific contributions to these takedowns.<\/p>\n The final section covers the recent \u201cdeathmatch\u201d-style infighting in the ransomware scene, featuring the minor player Dragonforce. Despite their lacking reputation and low victim count, Dragonforce\u2019s operators went on a brazen offensive, defacing the data leak sites (DLS) of several rival groups on the dark web \u2013 including Mamona and BlackLock \u2013 and ultimately taking down also the DLS of the then-leader, RansomHub.<\/p>\n If ransomware, infostelaers or new social engineering techniques are your thing, tune in and subscribe to the ESET Research Podcast. For a more detailed version, download the ESET Threat Report H1 2025<\/a> from the Threat Reports section<\/a> \u2013 no paywall or registration required.<\/p>\n\n