Related Threat Clusters
-
Revival of Finger Command in ClickFix Malware Attacks
Threat actors are exploiting the decades-old 'finger' command in new ClickFix malware attacks to execute remote commands on Windows devices. The command, which was historically used to retrieve user information on Unix…
4 articles · Updated November 17, 2025 -
ClickFix Campaign Uses Fake BSOD Screens to Distribute Malware in Hospitality Sector
A ClickFix social engineering campaign is targeting the hospitality sector in Europe by using fake Windows Blue Screen of Death (BSOD) screens. This tactic tricks users into manually compiling and executing malware on…
11 articles · Updated January 5, 2026 -
ClickFix Malware Campaign Evolves with Advanced Deception Techniques
The ClickFix malware has evolved to utilize videos, timers, and OS-specific tricks to deceive users into self-infection. This campaign leverages social engineering tactics to manipulate victims into executing malicious…
18 articles · Updated November 24, 2025 -
ClickFix Malware Campaign Uses Fake Windows Updates to Deploy Infostealers
A new wave of ClickFix attacks is utilizing fake Windows Update screens to deceive users into executing malicious commands that install infostealing malware. These attacks employ steganography to hide malware within PNG…
24 articles · Updated November 30, 2025
Recent Intelligence Reports
- Hospitality Sector Hit By PHALT#BLYX ClickFix Malware Campaign — Infosecurity-Magazine · January 6, 2026
- ClickFix attack uses fake Windows Update screen to push malware — Bleepingcomputer · November 24, 2025
- ClickFix Gets Creative: Malware Buried in Images — Huntress · November 24, 2025