A simple spam flood and fake support call is enough to plant Havoc malware

• Attackers now rely on employees to unknowingly launch the malware themselves
• Fake IT support calls transform routine troubleshooting into a full network compromise
• Browser crashes become the opening move in carefully staged social engineering attacks

Cybercriminal activity continues to move away from direct software exploitation toward manipulating everyday user behavior within corporate environments, experts have warned.

New research by Huntress describes a campaign in which attackers intentionally crash a user’s browser and display alarming security messages that encourage a “repair.”

The tactic creates a false sense of urgency while allowing the attacker to initiate direct communication with the employee.

Attackers take advantage of employee confusion

In many observed cases ...