[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

![TheHackersNews Avatar](https://lunarcrush.com/gi/w:24/cr:twitter::209811713.png) The Hacker News [@TheHackersNews](/creator/twitter/TheHackersNews) on x 926.5K followers
Created: 2025-07-14 17:02:00 UTC

🚨 A fake CAPTCHA is all it takes.

Interlock ransomware is back—now pushing a stealthy PHP RAT via “FileFix,” a spin on ClickFix that hijacks File Explorer.

Targets? Everyone.
Tactics? Evolving fast.

Here’s what they’re hiding behind Cloudflare Tunnels ↓

![](https://pbs.twimg.com/media/Gv1VdQRXQAAwikP.jpg)

XXXXXX engagements

![Engagements Line Chart](https://lunarcrush.com/gi/w:600/p:tweet::1944804583840141687/c:line.svg)

**Related Topics**
[cloudflare](/topic/cloudflare)
[stocks technology](/topic/stocks-technology)

[Post Link](https://x.com/TheHackersNews/status/1944804583840141687)