Tag
ClickFix attacks are spreading rapidly, infecting PCs and Macs by tricking users into executing malicious commands, bypassing security measures like Gatekeeper and evolving to use public services and blockchain for control.
Russian state-sponsored hacking group Sandworm has adopted the Clickfix attack technique to compromise devices in Ukraine, using fake CAPTCHAs to trick users into running malicious PowerShell scripts.
BasedApparel.com, an apparel site co-founded by FBI director Kash Patel, was found hosting a ClickFix attack that tricks macOS users into executing a malicious command via Terminal, potentially stealing credentials and cryptocurrency wallet data.