← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Fix the Click: Preventing the ClickFix Attack Vector
WHITE CyberHunter_NL 2025-07-10 Modified: 2025-08-09
47
IOCs
MEDIUM VOLUME
clickfixlumma stealernetsupport ratlatrodectusunitzip archivesloveniapalo altoclickfix lurerun windowclearfakepowershellallianceexampletrojanmalwareratsinstalleraprilautoitstealerhavocloaderlampionbackshadowevolution
Indicators of Compromise (3 / 47 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 94d786cd03f8dff56e4f97f5817894c482d5f6fa SHA1 of 3acc40334ef86fd0422fb386ca4fb8836c4fa0e722a5fcfa0086b9182127c1d7 2025-07-10
FileHash-SHA1 cca2b2aa7e21c655991686fc99549ef39a123ece SHA1 of 57e75c98b22d1453da5b2642c8daf6c363c60552e77a52ad154c200187d20b9a 2025-07-10
FileHash-SHA1 dac282410c0ac6648c859e74d5f114b3dae57a68 SHA1 of 506ab08d0a71610793ae2a5c4c26b1eb35fd9e3c8749cd63877b03c205feb48a 2025-07-10
References (1)
↗ https://unit42.paloaltonetworks.com/preventing-clickfix-attack-vector/