Recorded Future Insikt Group
ClickFix use by PurpleBravo (in ClickFix Campaigns Targeting Windows and macOS) · (no date on page)
ClickFix has been weaponized by a diverse spectrum of threat actors, ranging from high-volume initial access brokers (IABs) to sophisticated state-sponsored groups such as BlueDelta (aka APT28 ) and the North Korean group PurpleBravo.