Threat Actors TA584 Weaponize ClickFix Social Engineering For Tsundere Bot Payload

Cyberpress • January 29, 2026

Share: View original

Researchers have unmasked TA584, a prolific initial access broker (IAB), for ramping up attacks in late 2025. This threat actor .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

TA584 Expands Operations with Tsundere Bot via ClickFix Social Engineering The cybercriminal group TA584 has intensified its operations by deploying Tsundere Bot malware through ClickFix social engineering tactics. This initial access broker has significantly increased its campaign volume, tripling attacks from March to December 2025, targeting organizations worldwide. 5 sources 38

Extracted Entities

Malware (1)

Tsundere Bot Payload