Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
ClickFix Detections Surge 108% as AI-fix and CrashFix Expand Social Engineering Attacks
Excerpt
Cybercriminals are aggressively evolving their social engineering tactics, marked by a massive 108% surge in ClickFix detections . Threat actors are rolling out new deceptive variants, such as AI-fix and CrashFix, to trick unsuspecting users into compromising their own systems. These campaigns rely on displaying fake error messages in web browsers, prompting victims to copy and paste malicious PowerShell scripts directly into their administrative terminals. Once executed,…
Read the original report →Attack Flow7 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2025-55182 | High | Score 82/100 | First seen |
IOC Relationship Graph
Building graph…