<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Clickfix on Tenu Tech Brief</title>
    <link>https://cluster-site.onrender.com/tags/clickfix/</link>
    <description>Recent content in Clickfix on Tenu Tech Brief</description>
    <generator>Hugo -- 0.146.0</generator>
    <language>en-us</language>
    <lastBuildDate>Wed, 25 Feb 2026 07:59:08 +0000</lastBuildDate>
    <atom:link href="https://cluster-site.onrender.com/tags/clickfix/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>ClickFix Campaign Abuses Compromised Sites to Deploy MIMICRAT Malware</title>
      <link>https://cluster-site.onrender.com/posts/clickfix-campaign-abuses-compromised-sites-to-deploy-mimicrat-malware/</link>
      <pubDate>Fri, 20 Feb 2026 11:55:00 +0000</pubDate>
      <guid>https://cluster-site.onrender.com/posts/clickfix-campaign-abuses-compromised-sites-to-deploy-mimicrat-malware/</guid>
      <description>• ClickFix Campaign Abuses Compromised Sites to Deploy MIMICRAT Malware Cybersecurity researchers have disclosed details of a newClickFixcampaign that abuses compromised legitimate</description>
    </item>
    <item>
      <title>ClickFix Attacks Abuses DNS Lookup Command to Deliver ModeloRAT</title>
      <link>https://cluster-site.onrender.com/posts/clickfix-attacks-abuses-dns-lookup-command-to-deliver-modelorat/</link>
      <pubDate>Tue, 17 Feb 2026 21:01:02 +0000</pubDate>
      <guid>https://cluster-site.onrender.com/posts/clickfix-attacks-abuses-dns-lookup-command-to-deliver-modelorat/</guid>
      <description>• ClickFix campaigns have adapted to the latest defenses with a new technique to trick users into infecting their own machines with malware.</description>
    </item>
    <item>
      <title>ClickFix added nslookup commands to its arsenal for downloading RATs</title>
      <link>https://cluster-site.onrender.com/posts/clickfix-added-nslookup-commands-to-its-arsenal-for-downloading-rats/</link>
      <pubDate>Mon, 16 Feb 2026 13:09:37 +0000</pubDate>
      <guid>https://cluster-site.onrender.com/posts/clickfix-added-nslookup-commands-to-its-arsenal-for-downloading-rats/</guid>
      <description>• ClickFix uses fake CAPTCHAs and bogus updates to trick users into executing malicious commands. • Traditional mshta and PowerShell vectors are blocked, so attackers shifted to ns</description>
    </item>
    <item>
      <title>Microsoft Warns of ClickFix Attack Abusing DNS Lookups</title>
      <link>https://cluster-site.onrender.com/posts/microsoft-warns-of-clickfix-attack-abusing-dns-lookups/</link>
      <pubDate>Mon, 16 Feb 2026 11:56:12 +0000</pubDate>
      <guid>https://cluster-site.onrender.com/posts/microsoft-warns-of-clickfix-attack-abusing-dns-lookups/</guid>
      <description>• Microsoft has warned users that threat actors are leveraging a new variant of the ClickFix technique to deliver malware.TheClickFixattack method has been increasingly used in the</description>
    </item>
    <item>
      <title>New ClickFix attack abuses nslookup to retrieve PowerShell payload via DNS</title>
      <link>https://cluster-site.onrender.com/posts/new-clickfix-attack-abuses-nslookup-to-retrieve-powershell-payload-via-dns/</link>
      <pubDate>Mon, 16 Feb 2026 00:29:00 +0000</pubDate>
      <guid>https://cluster-site.onrender.com/posts/new-clickfix-attack-abuses-nslookup-to-retrieve-powershell-payload-via-dns/</guid>
      <description>• Threat actors are now abusing DNS queries as part of ClickFix social engineering attacks to deliver malware, making this the first known use of DNS as a channel in these campaign</description>
    </item>
    <item>
      <title>Pastebin comments push ClickFix JavaScript attack to hijack crypto swaps</title>
      <link>https://cluster-site.onrender.com/posts/pastebin-comments-push-clickfix-javascript-attack-to-hijack-crypto-swaps/</link>
      <pubDate>Sun, 15 Feb 2026 15:17:27 +0000</pubDate>
      <guid>https://cluster-site.onrender.com/posts/pastebin-comments-push-clickfix-javascript-attack-to-hijack-crypto-swaps/</guid>
      <description>• Pastebin comments push ClickFix JavaScript attack to hijack crypto swaps February 15, 2026 10:17 AM 0 Threat actors are abusing Pastebin comments to distribute a new ClickFix-sty</description>
    </item>
    <item>
      <title>Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware Staging</title>
      <link>https://cluster-site.onrender.com/posts/microsoft-discloses-dns-based-clickfix-attack-using-nslookup-for-malware-staging/</link>
      <pubDate>Sun, 15 Feb 2026 14:10:00 +0000</pubDate>
      <guid>https://cluster-site.onrender.com/posts/microsoft-discloses-dns-based-clickfix-attack-using-nslookup-for-malware-staging/</guid>
      <description>• Microsoft has disclosed details of a new version of the ClickFix social engineering tactic in which the attackers trick unsuspecting users into running commands that carry out a</description>
    </item>
    <item>
      <title>New Clickfix variant &#39;CrashFix&#39; deploying Python Remote Access Trojan</title>
      <link>https://cluster-site.onrender.com/posts/new-clickfix-variant-crashfix-deploying-python-remote-access-trojan/</link>
      <pubDate>Thu, 05 Feb 2026 18:51:39 +0000</pubDate>
      <guid>https://cluster-site.onrender.com/posts/new-clickfix-variant-crashfix-deploying-python-remote-access-trojan/</guid>
      <description>• In January 2026, Microsoft Defender Experts identified a new evolution in the ongoing ClickFix campaign. • This updated tactic deliberately crashes victims&amp;rsquo; browsers and then att</description>
    </item>
  </channel>
</rss>
