https://stevesec.net/tags/defensive/Recent content in Defensive on SteveSecHugoen-usWed, 01 Jan 2025 00:00:00 +0000https://stevesec.net/blog/clickfix-defense/Wed, 01 Jan 2025 00:00:00 +0000https://stevesec.net/blog/clickfix-defense/Fake reCAPTCHA pages that trick users into pasting an mshta command into the Run dialog. How the ClickFix attack chain works, start to finish, and how to shut it down.