ClickFix Campaign Activity
Tracking brief for the ClickFix campaign; individual sightings are folded in as reported.
What's new
- l2 poc_available Jul 6, 13:14 via securityweek
This brief tracks activity attributed to the ClickFix campaign. Sightings and indicators from separate reports are folded in as they are published, rather than creating a separate brief per report.
Recommendation
Review the collected indicators and references and hunt for ClickFix delivery patterns across endpoint and network telemetry.
Indicators of compromise
1
github_account_name
2
malware_name
1
packagist_namespace
| Type | Value |
|---|---|
| github_account_name | Xpos587 |
| packagist_namespace | sevenspan |
| malware_name | DEV#POPPER |
| malware_name | OmniStealer |