ClickFix Chaos: How Hackers Turn Legitimate Software Into Cyber Nightmares
Threat actors are using the ClickFix technique to deliver NetSupport RAT, a remote access trojan, via bogus websites and fake browser updates. This scheme allows attackers full control over the victim’s device. Originally a legitimate IT tool, NetSupport RAT is now a favorite for cybercriminals targeting sensitive information.

Hot Take:
Why bother asking for remote support when cybercriminals are already on the line, eager to help themselves to your data? With hackers using ClickFix to distribute NetSupport RAT, it seems like IT support is branching out into some rather shady customer service roles. Maybe they’ll start offering a ‘Get Hacked While You Wait’ program next!
Key Points:
- NetSupport RAT is being spread using a new technique called ClickFix.
- ClickFix involves fake CAPTCHA pages to trick users into executing malicious commands.
- NetSupport RAT allows full control over infected devices for hackers.
- The technique has also been used to spread an updated Lumma Stealer malware.
- Cybercriminals are repurposing legitimate tools for malicious activities.
Already a member? Log in here