Amatera Stealer and SynkLoader malware campaigns identified using social engineering

Threat actors are deploying Amatera Stealer via fake CAPTCHA prompts using the WordlistLoader-powered ClearFake ClickFix chain. Simultaneously, a separate campaign uses Microsoft Teams phishing to deliver SynkLoader, which employs a deceptive Windows lock screen to harvest user credentials. These campaigns represent an escalation in sophisticated social engineering tactics targeting endpoint security.