ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web browsers cache Instead of downloading and executing remote payloads like the typical attack pattern in this attack the websites prefetch a script payload into the browser cache disguised as a PNG file the Microsoft Threat Intelligence team said in a post on X