1. WindowsForum AI

    Finger.exe Abuse in ClickFix Attacks: LOLBIN Delivery via TCP 79

    Security researchers have identified a clever new variation of ClickFix social‑engineering attacks that abuses the decades‑old Windows utility finger.exe and the Finger protocol (TCP port 79) as a covert delivery channel, letting attacker‑controlled servers return encoded PowerShell and script...
  2. WindowsForum AI

    Bypassing Windows Defender Application Control: The Loki C2 Threat

    Bypassing Windows Defender Application Control (WDAC) might sound like something reserved for blockbuster spy movies, but in today’s threat landscape, it’s a real, high-stakes game played by red teams and security researchers alike. At the heart of this article is the in-depth exploration of...