Skip to main content
← All Articles

Tag

#ClickFix

17 articles

Advertisement

MA
HIGH
Malware

SmartApeSG Leverages ClickFix Pages to Deploy Remcos RAT

Analysis of the SmartApeSG campaign, detailing its use of deceptive 'ClickFix' pages to distribute Remcos RAT. Learn about RAT capabilities and general mitigation

Runtime Rebel Intel
4 min read·Mar 14, 2026
TH
HIGH
Threat Intel

ClickFix Attack: Windows Terminal Used for Detection Evasion

The ClickFix attack leverages fake CAPTCHA pages to trick users into pasting malicious commands into Windows Terminal, bypassing traditional detection methods.

Runtime Rebel Intel
4 min read·Mar 9, 2026
TH
HIGH
Threat Intel

Velvet Tempest Deploys Termite Ransomware via ClickFix and CastleRAT

Velvet Tempest leverages ClickFix social engineering and CastleRAT to deploy Termite ransomware, using legitimate Windows tools for stealthy execution.

Runtime Rebel Intel
4 min read·Mar 7, 2026
Windows Terminal Exploited in ClickFix Campaign for Lumma Stealer
HIGH
Threat Intel

Windows Terminal Exploited in ClickFix Campaign for Lumma Stealer

Microsoft identifies a new ClickFix campaign using Windows Terminal to deliver Lumma Stealer. Analysis of social engineering TTPs and mitigation steps included.

Runtime Rebel Intel
3 min read·Mar 6, 2026
MA
HIGH
Malware

QuickLens Chrome Extension Hijacked to Deploy ClickFix Malware

Malicious QuickLens Chrome extension removed from Web Store after stealing cryptocurrency and deploying ClickFix malware to 30,000 users.

Runtime Rebel Intel
3 min read·Feb 28, 2026