Pulse Detail — Threat Intelligence

PULSE NAME

IOC - ClickFix Removes Your Background but Leaves the Malware

WHITE ClickFix celestre 2026-05-06 Modified: 2026-05-30

IOCs

MEDIUM VOLUME

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

MALWARE FAMILIES

CastleLoader NetSupport RAT CastleStealer

Indicators of Compromise (3 / 22 total)

All FileHash-SHA256 URL domain

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-SHA256	bde21d8be65d31e1c380f2daae2f73c79f3e1f4bca70fb990db6fdf6c3768c92	—	2026-05-06
FileHash-SHA256	ed391a16389234f9ebb6727711baaf3e068d7f77c465708fa3e8b7d0565d7fb9	—	2026-05-06
FileHash-SHA256	f5dbaa09e60343f252a80d4a313a36ac11442d96b0896022d1a83744e3c11feb	—	2026-05-06

References (1)