A fake $TEMU crypto airdrop uses the ClickFix trick to make victims run malware themselves and quietly installs a remote-access backdoor.
We found fake “verify you are human” pages on hacked WordPress sites that trick Windows users into installing the Vidar ...
I wasn't really expecting it to just work out of the box, but NFS is surprisingly viable.