ClickFix Campaigns Abuse Legitimate Services for Persistent Access

Threat actors are utilizing a social engineering tactic to compromise organizations in two separate attacks. These attacks involve the abuse of legitimate services to gain persistent access, as seen in the ClickFix campaigns. The tactic allows threat actors to find new ways to breach organizations. The ClickFix campaigns highlight the evolving methods used by threat actors to exploit vulnerabilities. Legitimate services are being repurposed for malicious purposes, enabling persistent access to targeted organizations. This approach demonstrates the adaptability of threat actors in their efforts to compromise organizations.