ICLICKER SITE HACK TARGETED STUDENTS WITH MALWARE VIA FAKE CAPTCHA

Summary from the TLDR InfoSec newsletter

The website of iClicker, which provides a student engagement platform, was compromised in a ClickFix attack. The attack prompted users to click on a fake CAPTCHA, which copied a PowerShell command to users' clipboards and then instructed them to run it. The PowerShell script downloaded a legitimate Microsoft Visual C++ Redistributable if the script detected that it was in a malware sandbox or an unknown malware that is possibly an infostealer if it was running on a regular machine.