OCRFix Botnet Trojan Combines ClickFix Phishing with EtherHiding Tactics

OCRFix Botnet Trojan Combines ClickFix Phishing with EtherHiding Tactics

First seen 2 Mar 2026, 12:10 UTC •GbhackersCybersecuritynews •48.7

Article Content

Browse articles
ThreatCluster

The OCRFix botnet trojan campaign has been identified, utilizing ClickFix phishing techniques alongside EtherHiding to establish a resilient network of compromised machines. This method embeds attacker commands directly onto a public blockchain, complicating efforts for takedowns and detection.

How this analysis works

Timeline

2026-03-02
OCRFix botnet campaign discovered
2026-03-02
ClickFix phishing technique utilized
2026-03-02
EtherHiding method employed for command infrastructure

Extracted Entities

1 / 2