malware
Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery
High
Summary
This report details a concerning trend in malware delivery – the evolution of ClickFix, a technique where users are tricked into running malicious code by hand. Researchers have uncovered a new API-driven approach to generating these payloads, offering greater customization and bypassing traditional security measures. Furthermore, a novel delivery method utilizing downloaded files to the Downloads folder, designed to evade AMSI, has been identified, alongside evidence of state-sponsored groups leveraging ClickFix within their existing attack chains.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data