ClickFix campaigns abuse legitimate services to establish persistent access

Two distinct ClickFix social-engineering campaigns leverage legitimate services to bypass security controls and maintain persistence in target networks. The attacks highlight an evolving tactic that blends trusted platforms with credential phishing, increasing the difficulty of detection. The full scope of affected organizations remains unclear.