ClickFix Chaos: How State-Sponsored Hackers Are Turning Users Into Their Own Worst Enemy!
ClickFix could be the most popular social engineering trend since “Your car’s extended warranty has expired.” State-sponsored hacking groups from Iran, North Korea, and Russia have jumped on this bandwagon, unleashing malware with the same subtlety as a bull in a china shop.

Hot Take:
Looks like ClickFix is the new black in the cybercriminal world! With state-sponsored hacking groups from Iran, North Korea, and Russia all jumping on this bandwagon, it’s like a bad sitcom where everyone’s trying to outdo each other in the art of digital deception. Talk about a global cyber fashion trend!
Key Points:
- State-sponsored hackers from Iran, North Korea, and Russia are using the ClickFix technique to spread malware.
- Groups such as TA427, TA450, and TA422 are utilizing ClickFix to replace traditional malware deployment methods.
- The ClickFix tactic involves tricking users into running malicious commands under the guise of solving technical issues.
- Proofpoint has observed these campaigns targeting various sectors, including finance, government, and defense.
- The technique’s popularity suggests future adoption by other nation-state actors.
Already a member? Log in here