Windows Run is no longer the primary vessel for these attacks ...
A new ClickFix attack variant uses fake CAPTCHA pages instructing victims to paste and execute malicious commands in Windows Terminal.
Microsoft reveals ClickFix campaign abusing Windows Terminal to deliver Lumma Stealer and steal browser credentials.
Windows Terminal preview version 1.25 has been released, while version 1.24 is now stable. Developers get further configuration options.