Tag: powershell c2

1 Attack Reports | 0 Vulnerabilities

Attack reports

ClickFix Evolves with PySoxy Proxying

A sophisticated ClickFix campaign was observed in April 2026 deploying PySoxy, a decade-old open-source Python SOCKS5 proxy tool, to establish encrypted proxy access on compromised hosts. The attack chain begins with social engineering that tricks users into executing obfuscated PowerShell commands…
social engineering
clickfix
post-exploitation
2026-05-13
domain reconnaissance
powershell c2
pysoxy
python proxy
scheduled task persistence
Published: May 13, 2026
Downloadable IOCs: 2
Click here to see more Attack Reports