🧰 finger.exe

The items that name it 6

• Amazon-Themed ClickFix Campaign Serves Up Finger-Licking Malware
  writeupas tools2026-10-21It is written here as finger.exe: decades-old network utility abused as a LOLbin to fetch a script from a .plan file over port 79/tcp.
• How Huntress Detects and Responds to a ClickFix Attack
  writeupas affected products2026-10-05

  Windows binary from 1991, used as a LOLBin in the observed attack to fetch remote text via the finger protocol and execute it via a for /f loop.

• Akira, LimeWire, and the Sour Taste of Data Exfiltration
  writeupas tools2026-06-12

  Cited as a previously observed data exfiltration method used by threat actors

• Inside the RaaS Ecosystem: Operators, Affiliates & Attack Tradecraft | Huntress
  writeupas tools2026-05-20

  Used by attackers for data exfiltration

• ClickFix Removes Your Background but Leaves the Malware
  writeupas tools2026-04-30

  Abused Windows utility used to query attacker-controlled finger daemon and retrieve command payload

• Data Exfiltration and Threat Actor Infrastructure Exposed
  writeupas tools2026-03-12

  Native Windows utility observed being used for data exfiltration