NEW FILEFIX ATTACK WEAPONIZES WINDOWS FILE EXPLORER FOR STEALTHY COMMANDS

Summary from the TLDR InfoSec newsletter

FileFix, a variant of ClickFix attacks, is a new social engineering attack vector on Windows devices. In ClickFix attacks, a user is prompted by a website to execute a copied command in PowerShell to fix a bogus error. However, in the FileFix attacks, the user just needs to paste the command in the Windows File Explorer address bar, which is a much more familiar environment. The FileFix ruse informs users that a file was shared with them and prompts them to click a button that will launch File Explorer and copy a PowerShell command that contains a file path in a PowerShell comment to the clipboard. When the command is pasted into the File Explorer address bar, only the path will be displayed.