CTM360: 17,000 URLs Show How ClickFix Turns Trusted Sites Into Malware Traps

CTM360 released a global threat report on ClickFix, tracing 17,000 URLs that show how attackers abuse trusted websites to breach enterprises without exploits, attachments, or files on disk. The technique has evolved since late 2023 into a subscription product with on-chain infrastructure and state-sponsored users.

• Report covers 17,000 URLs linked to ClickFix attacks
• Attacks need no exploit, attachment, or file on disk
• Since late 2023 the technique became a subscription product
• Blocking malicious domains is no longer an effective defense