Plan
archived
CrowdStrike explains ClickFix social-engineering attack technique
- Engineer — Learn: ClickFix abuses clipboard/paste UI to trick users into running malicious commands; worth understanding to inform developer guidance and hardening of endpoint policies, but no patch or config change required.
- SOC/IR — Plan: ClickFix is a growing initial-access technique worth building detections for — hunt for suspicious PowerShell or cmd execution triggered from browser/clipboard context, and review CrowdStrike’s behavioral indicators.
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.