PhishingReviewed
Researcher flags surgebuilders.ink fake Surge Group jobs delivering malware
Researcher @Malwarehunterr says surgebuilders.ink impersonates Surge Group jobs and uses ClickFix commands to install info-stealing malware. Surge Group is not involved.
- surgebuilders.ink
- ClickFix BAT; also api.gamsterb.ink, api.cerysoi.ink
Reported Nov 8, 20261 report