https://thedfirreport.com/2025/07/14/kongtuke-filefix-leads-to-new-interlock-rat-variant/
KongTuke FileFix Leads to New Interlock RAT Variant - The DFIR Report
Feb 13, 2026 - Researchers from The DFIR Report, in partnership with Proofpoint, have identified a new and resilient variant of the Interlock ransomware group’s remote access...
https://www.kaspersky.ru/blog/filefix-attack-windows-file-explorer/40857/
Что такое FileFix (вариация ClickFix) | Блог Касперского
Nov 10, 2025 - Объясняем, что такое FileFix — новая вариация атаки ClickFix с социальной инженерией. Разбираем, как работает эта схема и как защититься от FileFix-атак.
filefixclickfix
https://detection.fyi/sigmahq/sigma/windows/process_creation/proc_creation_win_susp_filefix_execution_pattern/
Suspicious FileFix Execution Pattern | Detection.FYI
Detects suspicious FileFix execution patterns where users are tricked into running malicious commands through browser file upload dialog manipulation. This …
suspiciousfilefixexecutionpatterndetection
https://www.infosecurity-magazine.com/news/filefix-steganography-multistage/
FileFix Campaign Using Steganography and Multistage Payloads - Infosecurity Magazine
Apr 6, 2026 - FileFix campaign hides PowerShell script and encrypted EXEs in JPGs via multilingual phishing
infosecurity magazinefilefixcampaignusingsteganography
https://www.kaspersky.co.uk/blog/filefix-attack-windows-file-explorer/29701/
What is FileFix — a ClickFix variation? | Kaspersky official blog
Nov 10, 2025 - FileFix — the latest variation of the ClickFix attack using social engineering. How this scheme works, and how to protect your company against FileFix.
kaspersky official blogwhat isfilefixclickfixvariation
https://www.kaspersky.co.in/blog/filefix-attack-windows-file-explorer/29814/
What is FileFix — a ClickFix variation? | Kaspersky official blog
Nov 10, 2025 - FileFix — the latest variation of the ClickFix attack using social engineering. How this scheme works, and how to protect your company against FileFix.
kaspersky official blogwhat isfilefixclickfixvariation
https://www.acronis.com/sv/tru/posts/filefix-in-the-wild-new-filefix-campaign-goes-beyond-poc-and-leverages-steganography/
FileFix ute i det fria! Ny FileFix-kampanj går bortom POC och använder steganografi
Acronis Threat Research Unit upptäckte ett sällsynt in-the-wild exempel på en FileFix-attack — en ny variant av den nu ökända ClickFix-attackvektorn.
filefixutedetfriany
https://www.acronis.com/ja/tru/posts/filefix-in-the-wild-new-filefix-campaign-goes-beyond-poc-and-leverages-steganography/
FileFix の台頭!PoC を乗り超えてステガノグラフィを悪用した新たなキャンペーンが始動
アクロニスの脅威研究部門は、FileFix 攻撃の稀な実例を発見しました。これは、今や悪名高い ClickFix 攻撃ベクトルの新たな亜種です。
filefix
https://www.acronis.com/it/tru/posts/filefix-in-the-wild-new-filefix-campaign-goes-beyond-poc-and-leverages-steganography/
FileFix in circolazione! La nuova campagna FileFix va oltre il PoC e sfrutta la steganografia
L'unità di ricerca sulle minacce di Acronis ha scoperto un raro esempio in the wild di attacco FileFix: una nuova variante dell'ormai famigerato vettore di...
https://detection.fyi/sigmahq/sigma/windows/registry/registry_set/registry_set_filefix_typedpath_commands/
FileFix - Command Evidence in TypedPaths | Detection.FYI
Detects commonly-used chained commands and strings in the most recent 'url' value of the 'TypedPaths' key, which could be indicative of a user being targeted...
filefixcommandevidencedetectionfyi