Hackers are now using Microsoft Teams chats to impersonate IT support and trick employees into running malicious PowerShell commands. The KongTuke campaign shows why collaboration platforms need the same scrutiny as email when defending against social engineering and malware attacks.

ClickFix is basically a neon “I am not a robot” sign that tricks humans into doing the robot’s job—copy‑pasting nasty commands from compromised WordPress sites. The prize? Vidar Stealer quietly hoovers up creds, browser data, and more across Australian organisations like it’s speed‑running identity theft.