ClickFix Gets Sneaky
MentionsMicrosoftMozillaFirefoxMicrosoft Windows
Plays from YouTube in privacy-enhanced mode — nothing loads from YouTube until you press play.
ClickFix attacks have become common, but the payload details are worth paying attention to. I came across a particularly interesting example that uses a Windows command to search Firefox profiles, identify a file by size, copy it to a temporary directory, and run it as a batch script. Full video: https://youtu.be/oJHOlNTH7lY?si=JdmZpIm3jVq6Hpvt
Description from John Hammond.