ClickFix attacks evolve: DNS TXT records and cache prefetching hide payloads

Threat actors are refining ClickFix social-engineering attacks by concealing malicious payloads in DNS TXT records and leveraging browser cache pre-fetching, complicating early detection. The technique marks an evolution in evasion, shifting from direct payload delivery to multi-stage obfuscation. This raises the bar for network defenders and underscores the need for enhanced DNS and browser-level monitoring.