IClickFix WordPress Malware Framework

~Sekoia~
IClickFix framework compromises thousands of WordPress sites, using a 'ClickFix' lure to deliver NetSupport RAT.
-
IOCs: 85. 208. 84. 35, 141. 98. 11. 175, 83. 222. 190. 174
-
#IClickFix #NetSupportRAT #ThreatIntel #WordPress

Our latest TDR report on the #IClickFix framework:

📊 3,800+ WordPress sites compromised worldwide
⚙️ Multi-stage JavaScript loader
🚦 Abusing YOURLS as TDS
🖱️ Fake Cloudflare CAPTCHA and #ClickFix lure
🦠 #NetSupport RAT payload

bsky.app/profile/seko...