Tag: crashfix

2 Attack Reports | 0 Vulnerabilities

Attack reports

New Clickfix variant 'CrashFix' deploying Python Remote Access Trojan

A new evolution in the ClickFix campaign, dubbed CrashFix, has been identified. This variant deliberately crashes victims' browsers and uses social engineering to lure users into executing malicious commands. The attack begins with a malicious ad redirecting users to install a harmful browser exten…

social engineering

browser extension

Published: February 5, 2026

Downloadable IOCs: 13

Dissecting CrashFix: A New Toy

KongTuke, a threat actor tracked since 2025, has launched a new campaign using a malicious browser extension called NexShield that impersonates uBlock Origin Lite. The extension causes browser crashes and displays fake security warnings to trick users into executing malicious commands. The campaign…

social engineering

browser extension

enterprise targeting

Published: January 17, 2026

Downloadable IOCs: 10

Click here to see more Attack Reports