Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

ClickFix Detections Surge 108% as AI-fix and CrashFix Expand Social Engineering Attacks

Cyber Press
Cyber Press
Published July 8, 2026Original Report

Excerpt

Cybercriminals are aggressively evolving their social engineering tactics, marked by a massive 108% surge in ClickFix detections . Threat actors are rolling out new deceptive variants, such as AI-fix and CrashFix, to trick unsuspecting users into compromising their own systems. These campaigns rely on displaying fake error messages in web browsers, prompting victims to copy and paste malicious PowerShell scripts directly into their administrative terminals. Once executed,…

Read the original report →

Attack Flow7 steps · MITRE ATT&CK mapped

Initial AccessTA0001T1566
1/7
Phishing
ActionDeliver deceptive error messages
Attackers use deceptive variants like AI-fix and CrashFix, displaying fake error messages in web browsers to trick users.

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2025-55182HighScore 82/100First seen

IOC Relationship Graph

Building graph…