ClickFix Malware Campaign Exploits CAPTCHAs to Spread Cross-Platform Infections
According to new research from Guardio Labs, the social engineering approach known as ClickFix was able to gain the traction it did over the course of the last year by utilizing a combination of evasion strategies, narrative complexity, and propagation mechanisms.
"This new 'ClickFix' strain swiftly outpaced and eventually eradicated the notorious fake browser update scam that afflicted the internet just last year," security researcher Shaked Chen stated in a study published with The Hacker News, similar to a real-world viral variation.
It accomplished this by spreading via reliable infrastructure, eliminating the need for file downloads, and employing more clever social engineering techniques. The outcome was a surge of infections that included hyper-targeted spear-phishing lures a...