OTX Threat: Amazon-Themed ClickFix Campaign Serves Up Finger-Licking Malware

Attackers leveraged a sponsored Google search result for 'amazon business' to redirect victims to a spoofed Amazon login page hosted on Google Sites. The page presented a fake CAPTCHA (ClickFix) that tricked users into executing a malicious command using Windows' finger utility, an obsolete network tool repurposed as a living-off-the-land binary. This initiated a complex infection chain downloadin CVEs: CVE-2026-109618, CVE-2026-109619