⤷ Title: ClickFix Attacks Spread ChainScript RAT via Fake Spotify and Teams Installers
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 11:28:42 +0000
════════════════════════
⌗ Tags: #Security #Malware #ChainScript #ClickFix #Cybersecurity #RAT #Smart Contract #Windows
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 11:28:42 +0000
════════════════════════
⌗ Tags: #Security #Malware #ChainScript #ClickFix #Cybersecurity #RAT #Smart Contract #Windows
Hackread
ClickFix Attacks Spread ChainScript RAT via Fake Spotify and Teams Installers
Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart contracts to locate its C2 server.