Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
ClaudeFix: Shared Claude Chats Meet ClickFix
Threat Actors
Excerpt
IntroductionClickFix is a widely employed attack technique, first seen in 2024, where a victim is instructed to paste-and-run instructions on their system to “fix” a problem or install software. The seemingly benign instructions are, in fact, malicious and lead to the deployment of malware onto the victim’s system. Zscaler Threat Hunting has analyzed recent ClickFix attacks abusing Anthropic’s Claude platform through the use of shareable Claude chats to host these…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 0e17984a73d0b1c9c7c3916d32c49c8937f2e42d4c72c543c82999463a507abb | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…