From Victim to Vector: How Infostealers Turn Legitimate Businesses into Malware Hosts

Hudson Rock's report exposes the ClickFix campaign: a clipboard-based social-engineering attack that coerces users to paste PowerShell commands (via Windows+R, Ctrl+V, Enter) to fetch infostealers, and demonstrates a self-sustaining "victim-to-vector" feedback loop where stolen admin credentials from infected machines are used to compromise legitimate websites (220 domains correlated) to host further campaigns; the report includes technical anatomy, case studies (jrqsistemas.com, wo.cementah.com), and API endpoints for detection and remediation.