Skip to content
securitytabs

ClickFix Cache Trick

MentionsMicrosoftMicrosoft Windows

Plays from YouTube in privacy-enhanced mode — nothing loads from YouTube until you press play.

A compromised website is using ClickFix to deliver a malicious payload through the browser cache. I dig into the Windows batch script and investigate why it's looking for a file with a very specific size. Watch the full breakdown: https://youtu.be/oJHOlNTH7lY?si=uM0nMUExqyx-gino

Description from John Hammond.

More in Endpoint