17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360

A recent report by CTM360 has shed light on ClickFix, a technique used by attackers to compromise enterprise networks without relying on exploits, attachments, or files. This method has become the most common way for attackers to gain entry into these networks. The report traces the evolution of ClickFix from a novelty in late 2023 to a more sophisticated subscription-based product with supporting infrastructure. ClickFix has also gained a user base that includes state-sponsored entities. The technique's effectiveness has rendered traditional defensive measures, such as blocking malicious domains, less useful. The report provides insight into the scope of the issue, citing 17,000 URLs associated with ClickFix.