RST TI Report Digest: 30 Mar 2026
ID: c65608f2-f051-51ae-af74-d8ab29bbd4db
STIX ID: report--c65608f2-f051-51ae-af74-d8ab29bbd4db
Feed Name: RST Cloud Blog
Threat Score
Recorded Future / Insikt Group describes the ClickFix campaigns — a set of social-engineering operations observed since late 2023 that target both Windows and macOS by coercing victims to execute disguised commands and leveraging living-off-the-land techniques, obfuscated scripts (including clipboard/paste-jacking), and multiple loaders/stealers across five distinct clusters; the report includes detailed TTP descriptions and extensive IOCs (IPs, domains, and SHA-256 hashes).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.