The many variants of the ClickFix social engineering tactic

ronjor · May 9, 2025

Zeljka Zorz, Editor-in-Chief, Help Net Security May 8, 2025

As new malware delivery campaigns using the ClickFix social engineering tactic are spotted nearly every month, it’s interesting to see how the various attackers are trying to refine the two main elements: the lure and the “instruction” page.
Click to expand...

ronjor · Nov 9, 2025

Attackers upgrade ClickFix with tricks used by online stores

Zeljka Zorz November 7, 2025
Attackers have taken the ClickFix technique further, with pages borrowing tricks from online sellers to pressure victims into performing the steps that will lead to a malware infection.
Click to expand...

ronjor · Nov 11, 2025

ClickFix may be the biggest security threat your family has never heard of

Dan Goodin – Nov 11, 2025
Relatively new technique can bypass many endpoint protections.
The primary piece of malware installed in that campaign is a credential-stealer tracked as Shamos. Other payloads included a malicious cryptocurrency wallet, software for making the Mac part of a botnet, and macOS configuration changes to allow the malware to run each time the machine reboots.
Click to expand...

Another campaign, documented by Sekoia, targeted Windows users. The attackers behind it first compromise a hotel’s account for Booking.com or another online travel service. Using the information stored in the compromised accounts, the attackers contact people with pending reservations, an ability that builds immediate trust with many targets, who are eager to comply with instructions, lest their stay be canceled.
Click to expand...

ronjor · Nov 25, 2025 at 8:13 AM

Fake “Windows Update” screens fuels new wave of ClickFix attacks

Zeljka Zorz November 25, 2025
A convincing (but fake) “Windows Update” screen can be the perfect lure for tricking users into infecting their computers with malware.
Click to expand...

Log in or Sign up

The many variants of the ClickFix social engineering tactic

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The many variants of the ClickFix social engineering tactic

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches