Proofpoint Threat Insight
TA427 ClickFix campaign against think tanks; Japanese diplomat impersonation (January-February 2025) · April 17, 2025
In January and February 2025, Proofpoint first observed TA427 operators targeting individuals in fewer than five organizations in the think tank sector with a new infection chain using the ClickFix technique. ... In February 2025, TA427 operators masqueraded as a Japanese diplomat and sent an email to the target asking to arrange a meeting with Ambassador Shigeo Yamada, the Japanese ambassador to the US, at the embassy in Washington, DC.