Tag: reflective loader

1 Attack Reports | 0 Vulnerabilities

Attack reports

ClickFix Removes Your Background but Leaves the Malware

BackgroundFix masquerades as a free image-editing tool but functions as a ClickFix social engineering lure. The fake service prompts users to verify they are human, copying malicious commands to their clipboard that invoke finger.exe to retrieve additional payloads. This chain delivers CastleLoader…
social engineering
clickfix
netsupport rat
castleloader
2026-04-30
reflective loader
Published: April 30, 2026
Downloadable IOCs: 9
Click here to see more Attack Reports