Skip to main content
CyberConfirmedMediumDeveloping
10.0

Analysis of Korean-language malware campaign utilizing ClickFix and RustDesk

A malware campaign targeting Korean users leverages a fake fitness website to execute a ClickFix-based PowerShell script. The payload facilitates the unauthorized installation of RustDesk remote access software, with evidence suggesting the use of AI-generated content in the delivery mechanism.

vx-undergroundabout 2 hours agoKRCredibility 21%View source

Score Breakdown

Mosaic Score10.0
Confidence0.9
Significance0.5
Source credibility0.2

Intelligence Tags

Entities

country
Source

Related signals

8 found