ClickFix Campaign Delivers Modular TELEPUZ Malware With 36 Remote Commands

The report details an active ClickFix social-engineering campaign delivering a modular remote-access Trojan called TELEPUZ via a Vidar-based second stage; TELEPUZ supports credential theft, keylogging, web injections, remote control over WebSockets, resilient C2 discovery (Telegram, Steam, DNS, Polygon smart contract), and persistent/evasive techniques, and the report includes extensive IoCs and mitigation guidance.