ebx.cinemadataflow.cfd
Malicious ClickFix page impersonating Cloudflare. The website instructs users to press Win+R, open CMD, paste a command and execute it. The command downloads and executes an obfuscated PowerShell script, which downloads a silent MSI installer. The MSI contains an obfuscated…