Tag
social-engineering
2 entries.
A skill's prerequisites section is the payload
ClawHavoc filled an agent skill marketplace with polished documentation that ended in "install this first." The malware was never in the skill's code. It was a sentence the user, or the agent, was expected to follow.
The 8-stage ClickFix chain, decoded for defenders
Huntress caught a ChatGPT Custom GPT pushing a RAT through a Canon-signed DLL sideload. Here is each stage as an example a blue team can hunt for, from the ClickFix paste to the final payload.