Russian Elite Hackers Adopt Clickfix Social Engineering Tactic, Expanding Beyond Financial Crime

A social-engineering technique called Clickfix, traditionally used by financially motivated cybercriminals, is now being deployed by Russia's most sophisticated hacking groups. The shift signals a broader adoption of the tactic beyond its original criminal use, raising concerns about its weaponization by state-sponsored actors.

Why it matters: Security professionals and tech leaders need to understand how advanced threat actors are adopting proven social-engineering methods, as this adaptation can signal new attack vectors and elevated risk for enterprise and government targets.