TerminalFix malware leverages fake Cloudflare CAPTCHA for reverse tunneling

The TerminalFix variant of the ClickFix social engineering campaign uses deceptive Cloudflare CAPTCHA prompts to trick users into executing malicious PowerShell scripts. This deployment establishes a reverse tunnel, enabling attackers to pivot and access internal network resources from the compromised host.