ClickFix Chaos! - The Evolution of Social Engineering

About this episode

This episode discusses the ClickFix social engineering technique and its implications in cybersecurity.

ClickFix is a fast-growing social engineering technique appearing in malware campaigns, compromised websites, fake CAPTCHA prompts, and browser verification scams. In this episode Tyler Moffitt explains how attackers compromise legitimate sites by exploiting unpatched CMS or plugins, inject malicious JavaScript, and then trick visitors into “verifying” by opening Run/PowerShell and pasting a preloaded command that downloads malware, leading to info stealers and potentially ransomware.&n...

People in this episode

Guest: Tyler Moffitt

Topics covered

• social engineering
• malware
• cybersecurity
• information theft
• ransomware

Keywords

• ClickFix
• social engineering
• malware campaigns
• JavaScript injection
• info stealers
• ransomware

Mentioned in this episode

Organizations: ClickFix

More episodes of Reimagining Cyber - real world perspectives on cybersecurity

• Scattered Spider's Evolution: One Industry at a Time · June 10, 2026 · 15 min
• Vulnerability Management and the 2026 Verizon DBIR - #203 · May 27, 2026 · 27 min
• AI and Zero-Day Exploits: A New Cybersecurity Threat? - #202 · May 20, 2026 · 17 min
• The SMB Cyber Wake-Up Call - #201 · May 13, 2026 · 21 min
• 200 Episodes of Reimagining Cyber: Then, Now, and What’s Next · May 6, 2026 · 45 min
• Containment or Catastrophe - #199 · April 29, 2026 · 23 min