


Perceptive Security
SOC/SIEM Consultancy

I am not a robot: ClickFix used to deploy StealC and Qilin
Published:
18 december 2025 om 19:15:41
Alert date:
18 december 2025 om 20:01:18
Source:
news.sophos.com
A cybercriminal campaign uses fake human verification processes (ClickFix) to trick users into installing malware. The campaign deploys StealC infostealer and Qilin ransomware on victim systems. The attack leverages social engineering by mimicking legitimate CAPTCHA verification prompts. Users are deceived into running malicious code thinking they are completing a security verification. This represents an active threat combining information theft and ransomware deployment.
Technical details
Mitigation steps:
Affected products:
Related links:
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
