All Huntress Blog Posts

All Huntress Blog Posts

All things cybersecurity engaging and accessible - so you can stay ahead of hackers and boost your cybersecurity savviness.

Author: Dani Lopez
Threat Research
Beyond the clipboard: The evolving tradecraft of ClickFix
Beyond the clipboard: The evolving tradecraft of ClickFix

ClickFix techniques are evolving. Huntress breaks down four attack chains: lateral movement, hidden PNG payloads, Node.js RATs and cache seeing.

Ryan Isenhower,Dani Lopez,Austin Worline,Ben Nahorney,Susannah Matt
November 10, 2026
Dissecting CrashFix: KongTuke's New Toy
Dissecting CrashFix: KongTuke's New Toy

KongTuke built a fake browser extension that tells users their browser crashed and needs a scan. It doesn't. Huntress tracked this campaign back to a threat actor we've been following since 2025.