CTM360 Report Details ClickFix's Use of Blockchain and Social Engineering to Exploit Trusted Websites

The article reveals how ClickFix leverages social engineering and blockchain-based infrastructure to turn trusted websites into malware distribution channels. It highlights the technique's effectiveness, server-side targeting, and challenges in detection, with MITRE assigning it a specific sub-technique.

ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment, or a file on disk. Our new global threat report traces the technique from a novelty in late 2023 to a subscription product with on-chain infrastructure and a state-sponsored user base, and explains why blocking malicious domains is no longer a useful defense.

Read

Read original article