ClickFix to Cash-Out: Anatomy of a Mexican Banking-Fraud Toolkit

REF6045 is a human-operated, AI-assisted banking fraud campaign targeting Mexican financial institutions with a crude but effective PowerShell toolkit (SCMBANKER) that enables real-time victim monitoring, vishing, phishing, and direct account hijacking while exploiting poor operator OPSEC to expose its methods.