Back to Feed
MalwareMar 6, 2026

Microsoft Reveals ClickFix Campaign Using Windows Terminal to Deploy Lumma Stealer

Microsoft disclosed a ClickFix social engineering campaign that abuses Windows Terminal to deploy Lumma Stealer malware. The campaign, observed in February 2026, tricks users into executing malicious commands through the terminal emulator rather than traditional methods like the Windows Run dialog.

Summary

Microsoft disclosed a ClickFix social engineering campaign that abuses Windows Terminal to deploy Lumma Stealer malware. The campaign, observed in February 2026, tricks users into executing malicious commands through the terminal emulator rather than traditional methods like the Windows Run dialog.

Indicators of Compromise

  • malware — Lumma Stealer
  • malware — ClickFix