John Fitzpatrick From Ethereum to DNS C2: Reverse Engineering the ClickFix Payload Inside the ClickFix payload: how DeviceManager uses Ethereum to locate its C2, communicate over DNS and maintain persistent access. C2 ClickFix EtherHiding Malware
John Fitzpatrick Tracking ClickFix Infrastructure Back in mid July we thought it would be interesting to track some ClickFix activity and see how the infrastructure supporting it compares with other adversary activity... Adversary Tracking ClickFix
