New ClickFix attack Hides in Native Windows Tools to Reduce Detection Risk

Multiple security incidents reported by HackRead: a ClickFix phishing/CAPTCHA scam uses native Windows tools (cmdkey, regsvr32) for persistence to evade detection; TeamPCP compromised the Bitwarden CLI and abused GitHub Dependabot to deploy Shai‑Hulud and poison AI coding tooling; Harvester APT deployed new GoGra Linux malware targeting South Asia via fake PDFs/Microsoft APIs; Mustang Panda updated LOTUSLITE DLL‑sideloading backdoor targets Indian banks and Korean diplomats; Forcepoint disclosed hidden‑website prompt‑injection attacks against AI assistants; Anthropic is investigating a vendor/