Hello and welcome to the Monday, December 1st, 2025 edition of the Sands Internet Storm Centers Stormcast.

My name is Johannes Ulrich, recording today from Dallas, Texas.

And this episode is brought you by the sands.edu graduate certificate program in

cybersecurity leadership. Well, first of all, it looks like this long weekend, at least here in the

US, was pretty eventless and no emergencies here to report about nothing that you need to do

right now in order to sort of catch up

for whatever threat you may have missed this long weekend.

But we do have a couple sort of smaller things that are certainly worth covering.

First one is a new development when it comes to click-fix attacks.

Click-fix attacks do trick victims into

copy pasting commands into a command prompt to then execute malicious code. The latest version

was here identified by a cronists and what they observed is attackers using fake blue screens of death. And with that, again,

tricking users into copy-pasting commands into a command prompt. The ultimate idea is exactly

the same as click fix, but just the lure is a little bit different

with the Blue Screen of Death,

maybe a little bit more plausible at this point,

given that we hopefully have taught users about ClickFix

or they have experienced it firsthand,

while they may not have seen this with a blue screen.

Apparently the websites with displaying the blue screens are being advertised via Google Ads,

and the blue screen doesn't show up right away,

but only after the user interacts a little bit with the website.

...