17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360
-
ClickFix has evolved from a late-2023 novelty into what is now described as the most common initial access technique targeting enterprise networks. According to a new global threat report by CTM360, the method requires no exploit, no malicious attachment, and no file written to disk, which is precisely what makes it so difficult to defend against.
The report, built from an analysis of roughly 17,000 URLs, traces how ClickFix has matured into a subscription-based criminal product. Its infrastructure reportedly includes on-chain components, and its user base now extends to state-sponsored actors. The technique weaponizes trusted websites, turning them into delivery points that convince victims to run malicious commands themselves.
Because there is no payload on disk to scan and no software vulnerability to patch, traditional domain-blocking defenses are described as no longer useful against this threat. The report argues that organizations need to rethink detection and prevention strategies for this class of social-engineering-driven execution.
Key points from the findings:
- ClickFix is now the most common path into enterprise networks.
- The technique relies on no exploit, no attachment, and no on-disk file.
- Analysis covered approximately 17,000 URLs.
- ClickFix has become a subscription product with on-chain infrastructure.
- State-sponsored actors are among its users.
- Blocking malicious domains alone is no longer an effective defense.
Source: The Hacker News
Has your organization adjusted its defenses to account for ClickFix-style attacks, and if so, what approach are you taking?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login