{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","feed_url":"https://feed.craftedsignal.io/vendors/noma-labs/feed.json","home_page_url":"https://feed.craftedsignal.io/","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":[],"_cs_products":["open source packages","GitHub repositories","NPM packages","Packagist packages","Go modules","Chrome extensions","GitHub Agentic Workflows","GitHub AI agent","GitHub Actions","GitHub Copilot","Claude","Windows Defender","Windows AMSI","Telegram",".gov.br municipal portals",".gov.br police portals"],"_cs_severities":["high"],"_cs_tags":["campaign","clickfix"],"_cs_type":"advisory","_cs_vendors":["GitHub","Google","Noma Labs","Anthropic","JustWatch GmbH","Microsoft","Telegram","Brazilian Government","Banco do Brasil"],"content_html":"\u003cp\u003eThis brief tracks activity attributed to the ClickFix campaign. Sightings and\nindicators from separate reports are folded in as they are published, rather\nthan creating a separate brief per report.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eReview the collected indicators and references and hunt for ClickFix delivery\npatterns across endpoint and network telemetry.\u003c/p\u003e\n","date_modified":"2026-07-16T10:01:31Z","date_published":"2026-07-06T12:44:38Z","id":"https://feed.craftedsignal.io/briefs/2026-07-clickfix-campaign/","summary":"Tracking brief for the ClickFix campaign; individual sightings are folded in as reported.","title":"ClickFix Campaign Activity","url":"https://feed.craftedsignal.io/briefs/2026-07-clickfix-campaign/"}],"language":"en","title":"CraftedSignal Threat Feed - Noma Labs","version":"https://jsonfeed.org/version/1.1"}