Coming Soon - Hunting: Clickfix Exploitation

hunting Updated: Apr 4, 2026

Clickfix as been a prevalent malware campaign ongoing since roughly December of 2024, some reports even further back than that. In 2025 this campaign gained further momentum. Now in 2026 advanced APTs have really began adapting this technique as an initial access vector. This is social engineering that allows for remote code execution via the Run Window on windows.

An in-depth look at this campaign and how to hunt for this is coming to TalkinCyber very soon.

Stay tuned!

Tags

Jake

3 years in the Cyber space, heavily into home labbing. Avidly use Splunk. Just hope I can help some nerd find something cool. GCIA, GFCA, GPEN