Tag: base64 obfuscation

1 Attack Reports | 0 Vulnerabilities

Attack reports

The Evolution of ClickFix: From Cleartext to Server Side Polymorphism

The ClickFix campaign has evolved from basic disk-based infections to sophisticated, obfuscated attacks using fake CAPTCHA pages that trick victims into executing malicious PowerShell commands. Initial variants used cleartext commands downloading batch scripts to deploy DeerStealer InfoStealer. The…
powershell
infostealer
vidar
clickfix
deerstealer
fake captcha
xor encryption
fileless execution
2026-05-20
base64 obfuscation
server-side polymorphism
Published: May 20, 2026
Downloadable IOCs: 605
Click here to see more Attack Reports