Iran, North Korea, Russia: State hackers rely on ClickFix
State-sponsored hacking groups are increasingly adopting new social engineering techniques originally developed by commercially motivated cybercriminals. For example, ClickFix is now also increasingly being used by North Korean, Iranian, and Russian groups in espionage campaigns. The ClickFix method uses fake error messages or supposed security warnings to trick unsuspecting users into manually entering malicious PowerShell commands into their systems. This direct user interaction helps criminals bypass conventional defenses such as automatic malware scans. ClickFix integrated into cyberattacks At the turn of the year, Proofpoint researchers observed for the first time how groups from North Korea (TA427), Iran (TA450), and Russia (UNK_RemoteRogue…
