Tag: potemkin

1 Attack Reports | 0 Vulnerabilities

Attack reports

Potemkin Loader & RMMProject The Anatomy of a ClickFix Attack

A ClickFix social engineering attack on an unmonitored endpoint led to a multi-stage intrusion affecting over 11 hosts. The infection chain began with a malicious HTA payload that silently installed an MSI package containing Potemkin, a custom loader with a deterministic DGA. Potemkin delivered RMM…
credential theft
lateral movement
dga
clickfix
chisel
etherrat
blockchain c2
2026-06-16
hidden desktop
potemkin
rmmproject
Published: June 16, 2026
Downloadable IOCs: 14
Click here to see more Attack Reports