← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Analyzing a Full ClickFix Attack Chain - Part 1
WHITE Tr1sa111 2026-04-24 Modified: 2026-04-24
7
IOCs
LOW VOLUME
powershellfileless executiondropperpersistence mechanismphishingsocial engineeringclickfixfake captcha
Indicators of Compromise (7)
All URL domain
TYPEINDICATORDESCRIPTIONCREATED
URL https://hailmeinc.com/bkmsiqop.zip — 2026-04-24
URL https://hailmeinc.com/bkmsiqop.zip' — 2026-04-24
URL https://wiosyrondaty.com — 2026-04-24
domain accountpulsecentre.help — 2026-04-24
domain hailmeinc.com — 2026-04-24
domain textarea.select — 2026-04-24
domain wiosyrondaty.com — 2026-04-24
References (1)
↗ https://www.stormshield.com/news/analyzing-full-clickfix-attack-chain-part1/