Russia's Most Elite State Hackers Adopt ClickFix Social Engineering

Ars Technica·high signal

Ars Technica reports that top-tier Russian state-sponsored groups have begun using ClickFix — the fake-CAPTCHA / paste-this-command technique previously confined to financially motivated criminals — to infect targets. The migration of a commodity technique up to APT-grade actors signals that user-executed-command attacks are now effective enough for nation-state operations. Relevant to anyone whose agents or docs instruct users to paste shell commands.