About this episode

The episode features an interview discussing the CrashFix attack and its implications for supply chain security.

Interview with Anna Pham Breaking in with ClickFix: Anatomy of a modern endpoint attack Cybersecurity company Huntress just published a report on a new ClickFix variant they've discovered, which they've dubbed CrashFix. This technique was developed by KongTuke to serve as the primary lure within a new custom malicious browser extension also created by the group. In short, the team observed the threat actors using KongTuke's malicious browser extension to display a fake security warning, claiming the browser had "stopped abnormally" and prompting users to run a "scan" to remediate the threats. Upon "running the scan," the user is presented with a fake "Security issues detected" alert and instructed to manually "fix" the issue by opening the Windows Run dialog, pasting from their clipboard, and pressing Enter. The malicious extension silently copies a PowerShell command to the clipboard, disguised as a legitimate repair command. From there, they execute the malicious command. Segment Resources: BLOG - Dissecting CrashFix: KongTuke's New Toy Interview with David Zendzian Continuous compliance and real security lifecycle management Supply chain attacks are not just on the rise…

People in this episode

Host: Adrian Sanabria

Guests: Anna Pham, David Zendzian, Jacob Horne

Topics covered

• supply chain security
• endpoint attack
• malicious browser extension
• cybersecurity
• continuous compliance
• real security lifecycle management

Keywords

• CrashFix
• ClickFix
• malicious browser extension
• cybersecurity
• supply chain attacks
• PowerShell command
• security lifecycle management

Mentioned in this episode

Organizations: Huntress, KongTuke, NPM

More episodes of Enterprise Security Weekly (Audio)

• Rethinking Security from the OS Up in the Age of AI and more RSAC 2026 Interviews - Karen Heart, Sachin Jade, Phil Calvin, Craig Sanderson, Travis Wong - ESW #456 · April 27, 2026 · 1h 36m
• Making AI actually work in the enterprise and more RSAC Conference 2026 interviews - Camellia Chan, Aamir Lakhani, Jim Spignardo, Jody Brazil, Ely Abramovitch - ESW #455 · April 20, 2026 · 1h 40m
• We catch up on the news, including AI vuln hunting; also more RSAC interviews! - John Wilson, Mark Lambert, Georges Bossert, Samuel Hassine - ESW #454 · April 13, 2026 · 1h 37m
• Battling payment fraud with tokenization and executive interviews from RSAC 2026 - Jimmy White, Thyaga Vasudevan, Brian Oh, Mickey Bresman, Ashish Jain - ESW #453 · April 6, 2026 · 1h 46m
• Oops, all Interviews: Switching to Cyber, CISO Reflections, and the State of TPCRM - Alexandre Sieira, Lenny Zeltser, Helen Patton - ESW #452 · March 30, 2026 · 1h 50m
• Can AI help critical infrastructure, the state of the cyber market, and weekly news - Mike Privette, Kara Sprague - ESW #451 · March 23, 2026 · 1h 43m

Explore listener stats, chart rankings, contacts and more on the Enterprise Security Weekly (Audio) podcast page.