Mattia Fantin·Oct 20On-chain command-and-control: a ClearFake/ClickFix campaign hiding its C2 in a Polygon smart…By Mattia Fantin, SOC Analyst at InTheCyber Group
AQ999·Oct 20Fake AI Verification Wants Control of Your ComputerAn October ClickFix report shows how familiar services can lead to malware, with a clear stopping point for Bangladesh’s Windows users.
Medjue Gore·Oct 10Browser Cache Smuggling and ClickFix: A Potent ComboHow attackers turn the browser into a malware delivery channel
Muhammad Bimatara I·Oct 8From “PPT Compressor” to Injected Payload: Analyzing a ClickFix AttackLately, I have been hearing a concern that online tools like PDF converters or PDF compressors is not safe, they may be able to access or…
Ali Ardal·Sep 26The Placeholder Domain That Became a ClickFix TrapManifold Security wrote that the third-party.com domain, which frequently appears in developer documents, offered a fake Cloudflare…
Aayatullah Adeyemi·Sep 18SOC338 — Lumma Stealer — DLL Side-Loading via Click Fix PhishingEventID : 316
devmihaylov·Aug 21The other GTA VI lure - a ClickFix loader that leaked its own C2The same GTA VI leak wave that produced the Vidar site also produced a second, very different lure. Where the Vidar site tricked you into…
Doka·Aug 20How a Polygon Smart Contract Revealed an Entire ClickFix InfrastructureAnalyzing a real-world EtherHiding implementation used to dynamically distribute malicious infrastructure through the Polygon blockchain.
Black House Cyber·Aug 7Six Stages, No Server: Tracing a ClickFix Chain That Lives on the BlockchainHow a Portland auto parts distributor’s website became the front end for a WebDAV-delivered infostealer and why there was nothing to take…
InCodeToDeploybyCriminal IP·Jul 30Tracing the XMRig Distribution Infrastructure in the Steam Forum ClickFix AttackA ClickFix attack was recently identified on Steam discussion forums, where malicious PowerShell commands were disguised as solutions to…
