Help Net Security2026-11-12 23:15:23

Fake Zillow pages use ClickFix NetSupport RAT to target apartment hunters

EfficientIP Research Labs traced a ClickFix campaign that used fake Zillow apartment-review pages to install NetSupport RAT on visitors’ Windows computers.

Summary

Each page showed what looked like a routine verification check. Behind it, the page quietly copied a PowerShell command to the clipboard and walked the visitor through pasting and running it. Doing that installs remote-control software that keeps its window hidden and starts back up every time the user logs in.

efficientipnewsthreatsscamscybercrimethreat intelligencedon't misscybersecurity

This is a brief wire summary, the full story (linked below) has the complete details.

KazaSec's take

Stories like this are part of why proactive security testing exists, finding the gap before someone else does is always cheaper than responding after the fact.

Coverage details

Source: Help Net Security
Published: 2026-11-12 23:15:23
Author: mirko zorz
Category: technology

We've archived 1655 other articles touching the same topic (efficientip, news, threats) , see the full security news archive.

Worried this kind of story could be about you next?

We help organizations find and fix the gaps before they make headlines.

Request a Security Assessment Browse Services