{
  "name": "ClickFix Is Now Hiring: From Job Platform Impersonation to Python-Based RAT Delivery",
  "slug": "clickfix-is-now-hiring-from-job-platform-impersonation-to-python-based-rat-delivery",
  "description": "A multi-stage phishing campaign emerged in early May 2026, impersonating LinkedIn and Indeed through typosquatted domains to deliver malicious payloads. The attack chain begins with fake CAPTCHA pages distributed via Google Ads, leveraging the legacy Finger protocol and native Windows utilities. Victims are tricked into executing commands that deploy portable Python runtimes (CPython or IronPython), which then execute in-memory shellcode. The campaign delivers CastleLoader, a Malware-as-a-Service framework using ChaCha20 and RC4 encryption for C2 communications, followed by a Python-based remote access trojan. The RAT provides interactive shell control, in-memory payload execution, and persistence mechanisms. The campaign represents an evolution of browser-based social engineering, combining Living-off-the-Land binaries with Python-based delivery to maintain a fileless footprint and evade detection through legitimate system utilities.",
  "published": "2026-06-04T22:52:19.468000+00:00",
  "created_at": "2026-06-05T06:41:45.340000+00:00",
  "modified_at": "2026-06-05T04:41:45+00:00",
  "created_at_opencti": "2026-06-05T06:41:45.340000+00:00",
  "author": "AlienVault",
  "confidence": 100,
  "report_types": [
    "threat-report"
  ],
  "labels": [
    "castleloader",
    "clickfix",
    "fileless execution",
    "lolbin",
    "phishing",
    "python rat",
    "social engineering",
    "typosquatting"
  ],
  "tags": [
    "2026-06-04",
    "castleloader",
    "clickfix",
    "fileless execution",
    "lolbin",
    "phishing",
    "python rat",
    "social engineering",
    "typosquatting"
  ],
  "related_entities": {
    "indicators": [
      {
        "id": "d523f27c-c80e-4c0e-a815-aa315b59f24e",
        "name": "linked-people.com"
      },
      {
        "id": "d932f012-8a4b-4f8c-b414-d64a7bfc9707",
        "name": "sedaliarealty.net"
      },
      {
        "id": "67b03cbb-74f8-4df6-9eeb-cbcdd2e9dbb1",
        "name": "http://linked-hr.com/leyts.php"
      },
      {
        "id": "0acdb16b-2175-4c3b-b60d-f4d1fc518495",
        "name": "http://teamsvoicehub.com/leyts.php"
      },
      {
        "id": "4d722c97-a770-405b-ae7a-803fc81930d3",
        "name": "http://linked-people.com/leyts.php"
      },
      {
        "id": "f03f80e7-5c74-49e7-bc18-3eeaf1a350f4",
        "name": "catalyst-ltd.net"
      },
      {
        "id": "cb7ccebb-bffd-4ea7-b293-56b7a4c7ade4",
        "name": "http://indeed-jobs.net/leyts.php"
      },
      {
        "id": "fca523a5-6369-457e-8d4d-d68c1008d843",
        "name": "http://candipoker.net/ebd417db-979c-51f8-aedf-88a2bf8aa6c3"
      },
      {
        "id": "ecaf907e-b97b-4159-8ba6-44bd6e3bd10f",
        "name": "linked-hr.com"
      },
      {
        "id": "05d3c0d9-7083-4109-a4e7-213a6466de48",
        "name": "08a474368a2f94f347ad9e1a0a08d4258fcf49c6b9373214f7901bb770bacca4"
      },
      {
        "id": "2db0a80c-c6e1-4033-a3f0-03bd0b9d8a0c",
        "name": "http://uslinked.org/infos.php"
      },
      {
        "id": "90d5cb74-ffbc-44f8-beb2-9476657b75e0",
        "name": "domawe.net"
      },
      {
        "id": "8d0b8d3c-9fbf-4ec9-8633-9e426c6109bc",
        "name": "0e346fb46176ffce4c7dbe40a8682bc1f4a2fc70b7389be427568d97a47bd149"
      },
      {
        "id": "a28a7b14-98b5-421d-8559-667a10ae6346",
        "name": "sinjim.net"
      },
      {
        "id": "8611d9dd-4f79-401c-9f2a-b29d9ab39a5d",
        "name": "staruxaproruha.com"
      },
      {
        "id": "7b6408a4-074f-4012-b22c-e246d4546718",
        "name": "http://idrci.net/95126aeb-4120-56b1-8c9e-63fdf0c0b6f9"
      },
      {
        "id": "41ddc01b-aaa4-41db-bb75-53e8a82db88f",
        "name": "golinked.net"
      },
      {
        "id": "93a04202-6ca1-4ace-b9fc-140d890efef2",
        "name": "cd4a51037bf58733c0cb24b273951dd3fcea45a2aaeb8b30a3c625e183c4c0c7"
      },
      {
        "id": "b1cde5a7-6d48-4643-a3f8-ead090e7ae93",
        "name": "http://mtg-life.net/95126aeb-4120-56b1-8c9e-63fdf0c0b6f9"
      },
      {
        "id": "5c341073-4942-4d01-96b5-562dc35af432",
        "name": "d04ae4d214531d70c634d29763a9c0b84d601cf94aaca4720363f7512995393c"
      },
      {
        "id": "f7575aff-49ce-4f1a-a20c-39944f27fef1",
        "name": "http://domawe.net/95126aeb-4120-56b1-8c9e-63fdf0c0b6f9"
      },
      {
        "id": "204b2e38-b274-400d-8519-7b09e0c514e4",
        "name": "dmtn-tv.net"
      },
      {
        "id": "5e9c1e7a-9afe-4f93-b406-791699e04c7e",
        "name": "http://sinjim.net/95126aeb-4120-56b1-8c9e-63fdf0c0b6f9"
      },
      {
        "id": "ca427a73-8d49-402f-95c3-efb531ed549e",
        "name": "crewlworkinew.com"
      },
      {
        "id": "fd65313b-b363-4e8f-bd0a-342438179511",
        "name": "http://linkedplus.org/leyts.php"
      },
      {
        "id": "9c86821c-5655-4c7f-ba39-9e68ad9b29e8",
        "name": "c024a3d852b73fef5bfca7ec5c80df3d59ff9ec858e0adad80c588fe22c39dfc"
      },
      {
        "id": "83cd4353-b682-48e6-895f-9def780687c8",
        "name": "dapala.net"
      },
      {
        "id": "64f91850-0dc8-411c-8b04-91e991cb935e",
        "name": "teamsvoicehub.com"
      },
      {
        "id": "1ae8a4b6-cec8-48f9-a7c4-b57f047dcbfb",
        "name": "linkedplus.org"
      },
      {
        "id": "bbeb933d-a80f-4f7b-9f25-dd72e4da2f47",
        "name": "7c54bcf3aea8348e8902cac80eb0df31b43a71601a62e2514087fef40a416bfd"
      },
      {
        "id": "a1f53857-a475-48be-9c41-083418435aa6",
        "name": "linkedwith.org"
      },
      {
        "id": "0b4b6903-2d98-4f8f-9f4d-e55baf0d7d6b",
        "name": "http://dmtn-tv.net/95126aeb-4120-56b1-8c9e-63fdf0c0b6f9"
      },
      {
        "id": "2b981f5a-eccf-45e6-b94d-6be18ca75e70",
        "name": "tronscaner.net"
      },
      {
        "id": "1a76c900-3ad5-432f-9604-07578165db96",
        "name": "linked-on.com"
      },
      {
        "id": "71d3b083-9b6f-44b3-845c-766aec0dc784",
        "name": "d56b810dfacaa1630bf562ccdefd46835349710d9516334e1a182619335ddea7"
      },
      {
        "id": "89d34c81-45e7-49e2-aedf-e462b054b7d2",
        "name": "http://dapala.net/95126aeb-4120-56b1-8c9e-63fdf0c0b6f9"
      },
      {
        "id": "e9c5a3b0-d477-46be-af3e-9adf4bae0002",
        "name": "novayastaruxa.com"
      },
      {
        "id": "1c590e05-70e6-43f1-91d0-40c94d7eda0f",
        "name": "candipoker.net"
      },
      {
        "id": "7a262ab7-1e0a-40da-948e-cca08fffd04d",
        "name": "indeed-jobs.net"
      },
      {
        "id": "e7f0b87c-0019-4abd-8a04-426701fc4f80",
        "name": "http://indeedhiring.com/leyts.php"
      },
      {
        "id": "b4167bf0-9126-4c93-8572-1183bc92d317",
        "name": "kevinnotanother.com"
      },
      {
        "id": "e1199256-3092-4465-9d40-dc3df0bf1e08",
        "name": "1006326830900030409.com"
      },
      {
        "id": "faae0e32-28b3-480a-a69e-66f0bcdb76df",
        "name": "http://ai-like.net/95126aeb-4120-56b1-8c9e-63fdf0c0b6f9"
      },
      {
        "id": "960a5afd-4f3d-4719-ae9d-94a855892a3b",
        "name": "http://tronscaner.net/infos.php"
      },
      {
        "id": "d48c1560-34cf-4b17-9ee5-f5ab78729e2c",
        "name": "ai-like.net"
      },
      {
        "id": "31e61809-d059-4cac-a3a5-079bd4bc9026",
        "name": "d3e936fa36289fd1210047d8f25257bab0608825ed92908dc98c00e33bdb3db2"
      },
      {
        "id": "c6c78a39-e367-4aaf-8298-3827e3595746",
        "name": "e5e43b0830369c39fab45363486da4d21a98c5097ea262c9816997f11c73c1c4"
      },
      {
        "id": "2df2a03f-ff35-461c-8726-d7359647ccec",
        "name": "http://sedaliarealty.net/ebd417db-979c-51f8-aedf-88a2bf8aa6c3"
      },
      {
        "id": "03b9e7e1-eb59-4a81-be3b-833f8cf9ef4d",
        "name": "idrci.net"
      },
      {
        "id": "80a58762-b31b-42e7-825d-fafc5b06b912",
        "name": "http://linkedall.org/infos.php"
      },
      {
        "id": "d93af132-fd2f-4d9a-b007-98ee4c6770be",
        "name": "http://catalyst-ltd.net/95126aeb-4120-56b1-8c9e-63fdf0c0b6f9"
      },
      {
        "id": "207ffa9b-6f85-4b05-87e7-7d4ee190bf1f",
        "name": "ee2d34ac98eaf1451d19fdc99f0bb52db1db60f71933a91f5655af0703ff2464"
      },
      {
        "id": "3d49bdb8-2551-4d7e-a819-a1ccd0d6e21a",
        "name": "uslinked.org"
      },
      {
        "id": "1bea0d26-f462-46c0-bbb7-076c4e0501ab",
        "name": "linkedall.org"
      },
      {
        "id": "78fc023c-4016-481a-93a9-b488f5795ee7",
        "name": "mtg-life.net"
      },
      {
        "id": "8caf0d1c-dd5e-4004-8093-9c6f62098317",
        "name": "http://linked-on.com/leyts.php"
      },
      {
        "id": "07ba2ac2-ce12-4219-87ef-3ed9bb05d2d4",
        "name": "indeedhiring.com"
      },
      {
        "id": "2b14c701-b618-43ae-86af-f4ba2bd73ee8",
        "name": "http://linkedwith.org/leyts.php"
      }
    ],
    "attack_patterns": [
      {
        "id": "16e4fc82-7c0b-4d1a-b784-b804b4df26dc",
        "name": "T1204.001"
      },
      {
        "id": "6ccd4566-e15e-40cf-b7df-4a3f737ce5cd",
        "name": "T1036.005"
      },
      {
        "id": "c3af9fd7-d307-4df4-9220-cc627938fb85",
        "name": "T1055"
      },
      {
        "id": "c9ee9b30-ba84-4c24-95e9-e8242d42af3f",
        "name": "T1071.001"
      },
      {
        "id": "32b33067-6566-4b8d-be80-e96f765d84de",
        "name": "T1059.001"
      },
      {
        "id": "6b2e0999-c7e8-4662-94ac-19aa8520ee46",
        "name": "T1059.003"
      },
      {
        "id": "60972cf6-e90b-4600-af3c-13c468391d9c",
        "name": "T1106"
      },
      {
        "id": "81b422de-709e-43bd-b471-2befac0c623a",
        "name": "T1218.011"
      },
      {
        "id": "0c836307-129e-4ff7-a532-180c633cacba",
        "name": "T1027"
      },
      {
        "id": "cbd87c8c-3bed-461a-acef-56ffc8b87571",
        "name": "T1105"
      },
      {
        "id": "5999052b-e9ae-49e8-9235-d9bf975c22af",
        "name": "T1547.001"
      },
      {
        "id": "52b92395-d3d3-4e05-976a-0fccccfce8d2",
        "name": "T1566.002"
      },
      {
        "id": "5b7c66d1-0466-4ba7-af6f-eb82c2f9d05b",
        "name": "T1033"
      },
      {
        "id": "05ac27d4-58d0-44b2-a984-cd5aefd1f7f9",
        "name": "T1497.001"
      },
      {
        "id": "14660ccf-ca6b-42f6-8bca-e1b7a04650b3",
        "name": "T1573.001"
      },
      {
        "id": "0156fcda-e385-4662-b388-086c3e16feec",
        "name": "T1140"
      },
      {
        "id": "70616b2f-4019-4963-b758-5d9f6f20e201",
        "name": "T1082"
      },
      {
        "id": "fa3b8b48-d97c-4242-83a6-07d435a5a79e",
        "name": "T1041"
      }
    ],
    "malware": [
      {
        "id": "e77c0ea5-60eb-4814-82ca-e2553343c1c9",
        "name": "CastleLoader",
        "slug": "castleloader"
      }
    ],
    "observables": [
      {
        "id": "e50f2063-06d3-4844-a940-c473d47a444f",
        "name": "1006326830900030409.com"
      },
      {
        "id": "7144dce4-e66a-409c-8f99-fb536ba88f6a",
        "name": "tronscaner.net"
      },
      {
        "id": "e1413bc3-a2b2-4462-89f7-994b74bff4ea",
        "name": "linked-on.com"
      },
      {
        "id": "d8ee1674-fcce-48f3-907c-5d4cedb71e71",
        "name": "dapala.net"
      },
      {
        "id": "ee02b532-9edd-4ffa-aeb4-18df96be67b4",
        "name": "catalyst-ltd.net"
      },
      {
        "id": "dde4d95b-1b20-4d4a-a800-9d2e4541e85b",
        "name": "golinked.net"
      },
      {
        "id": "e5ed5a4f-7e71-4825-b2b3-213010348801",
        "name": "crewlworkinew.com"
      },
      {
        "id": "bed4dc58-705b-42ff-89bd-ed31f964cf52",
        "name": "teamsvoicehub.com"
      },
      {
        "id": "633329b0-cd2e-449e-a98e-1ba1c316de6d",
        "name": "linked-hr.com"
      },
      {
        "id": "fa4a8064-be60-4529-a3fc-136d56d37630",
        "name": "candipoker.net"
      },
      {
        "id": "3775a7a0-17b2-4101-82d1-11660fcd00a7",
        "name": "linkedwith.org"
      },
      {
        "id": "a7eb33f7-c732-45c8-8cb3-90961846d2e5",
        "name": "sinjim.net"
      },
      {
        "id": "9bc8e7d5-8816-4d81-a0cb-d7d25ea09104",
        "name": "linkedplus.org"
      },
      {
        "id": "64498afb-7a6d-4f8a-a7bd-7dfb960aa380",
        "name": "ai-like.net"
      },
      {
        "id": "7dabd814-01cb-4638-aefc-4a411f45d608",
        "name": "kevinnotanother.com"
      },
      {
        "id": "2bdef61d-72c7-4406-8cdc-a9e646e744f1",
        "name": "indeedhiring.com"
      },
      {
        "id": "7ec3658b-c8f8-456a-8fdc-8c2954e8f231",
        "name": "linkedall.org"
      },
      {
        "id": "1921cadb-1af6-4126-9498-373faee61be3",
        "name": "domawe.net"
      },
      {
        "id": "628f39aa-1e3f-4df1-ae88-15d8c9e84266",
        "name": "novayastaruxa.com"
      },
      {
        "id": "180c6bf4-5c02-4b98-8147-1d214e861526",
        "name": "uslinked.org"
      },
      {
        "id": "6153b610-f353-4e52-b338-3803e5f4be87",
        "name": "mtg-life.net"
      },
      {
        "id": "e2756cb8-001a-45e3-aebb-b821e46f802a",
        "name": "dmtn-tv.net"
      },
      {
        "id": "086fddce-22a2-4f3f-ab11-43053ce8a07f",
        "name": "linked-people.com"
      },
      {
        "id": "c00b38f0-466a-4f6c-a4fa-a9ef5e8484ee",
        "name": "staruxaproruha.com"
      },
      {
        "id": "a3af9703-2181-45ce-b9b0-e8dd7fcd6154",
        "name": "idrci.net"
      },
      {
        "id": "9c5b8d43-0dca-4216-bae8-b9d704914669",
        "name": "indeed-jobs.net"
      },
      {
        "id": "763a1d1f-4f15-424c-82c9-575ee3dd9098",
        "name": "sedaliarealty.net"
      },
      {
        "id": "542b617b-5057-47ac-8d08-c529efc69382",
        "name": "http://sedaliarealty.net/ebd417db-979c-51f8-aedf-88a2bf8aa6c3"
      },
      {
        "id": "2619b1f6-ea6c-47c9-82dc-98a924789cfb",
        "name": "http://linkedplus.org/leyts.php"
      },
      {
        "id": "ffa5a800-3064-4382-80be-22279d4b75b5",
        "name": "http://linkedall.org/infos.php"
      },
      {
        "id": "4b3c14a7-1ce0-4824-ab87-199fb0f15192",
        "name": "http://linked-on.com/leyts.php"
      },
      {
        "id": "832ddec9-a0ff-4496-8b94-ee9b5bb6c3e4",
        "name": "http://dapala.net/95126aeb-4120-56b1-8c9e-63fdf0c0b6f9"
      },
      {
        "id": "f1ee9ff0-3dd3-428d-b385-42b8787375c3",
        "name": "http://catalyst-ltd.net/95126aeb-4120-56b1-8c9e-63fdf0c0b6f9"
      },
      {
        "id": "1c6816eb-9e30-41c4-a896-f364c1a8662f",
        "name": "http://teamsvoicehub.com/leyts.php"
      },
      {
        "id": "06a1a878-b948-4790-a93f-cc4d6d922056",
        "name": "http://candipoker.net/ebd417db-979c-51f8-aedf-88a2bf8aa6c3"
      },
      {
        "id": "9bbe371b-72f9-4619-ae01-1d36c300b63e",
        "name": "http://indeedhiring.com/leyts.php"
      },
      {
        "id": "b057dc75-a892-41ea-893a-5da69dc4d0ba",
        "name": "http://mtg-life.net/95126aeb-4120-56b1-8c9e-63fdf0c0b6f9"
      },
      {
        "id": "4640800c-9f18-4be1-b6b4-a1e3b44ea5be",
        "name": "http://linkedwith.org/leyts.php"
      },
      {
        "id": "fbe7a31b-66dc-4f5a-94f1-f10227d25b88",
        "name": "http://sinjim.net/95126aeb-4120-56b1-8c9e-63fdf0c0b6f9"
      },
      {
        "id": "61dc2283-510d-43cf-b971-c1cfcff0f6f0",
        "name": "http://indeed-jobs.net/leyts.php"
      },
      {
        "id": "4336d891-cdf3-481c-b860-be45b2cc450f",
        "name": "http://uslinked.org/infos.php"
      },
      {
        "id": "a08b0540-a895-4df0-9571-f994acd90d74",
        "name": "http://ai-like.net/95126aeb-4120-56b1-8c9e-63fdf0c0b6f9"
      },
      {
        "id": "70ec265f-21d3-4e48-ba9d-fed7103c2c7a",
        "name": "http://linked-hr.com/leyts.php"
      },
      {
        "id": "4dee04ef-bda0-417f-bef4-ecc96dbb1e14",
        "name": "http://dmtn-tv.net/95126aeb-4120-56b1-8c9e-63fdf0c0b6f9"
      },
      {
        "id": "44400aaa-baef-4c2a-8752-1d6ca61dca90",
        "name": "http://tronscaner.net/infos.php"
      },
      {
        "id": "366c75a5-cd6c-42fb-b931-cc9088a08f45",
        "name": "http://linked-people.com/leyts.php"
      },
      {
        "id": "ccda6c9b-693e-414b-8476-86994303f1c3",
        "name": "http://idrci.net/95126aeb-4120-56b1-8c9e-63fdf0c0b6f9"
      },
      {
        "id": "0033e510-a3d1-4a86-92c8-2b488c77c894",
        "name": "http://domawe.net/95126aeb-4120-56b1-8c9e-63fdf0c0b6f9"
      },
      {
        "id": "",
        "name": "08a474368a2f94f347ad9e1a0a08d4258fcf49c6b9373214f7901bb770bacca4"
      },
      {
        "id": "",
        "name": "0e346fb46176ffce4c7dbe40a8682bc1f4a2fc70b7389be427568d97a47bd149"
      },
      {
        "id": "",
        "name": "cd4a51037bf58733c0cb24b273951dd3fcea45a2aaeb8b30a3c625e183c4c0c7"
      },
      {
        "id": "",
        "name": "d04ae4d214531d70c634d29763a9c0b84d601cf94aaca4720363f7512995393c"
      },
      {
        "id": "",
        "name": "c024a3d852b73fef5bfca7ec5c80df3d59ff9ec858e0adad80c588fe22c39dfc"
      },
      {
        "id": "",
        "name": "7c54bcf3aea8348e8902cac80eb0df31b43a71601a62e2514087fef40a416bfd"
      },
      {
        "id": "",
        "name": "d56b810dfacaa1630bf562ccdefd46835349710d9516334e1a182619335ddea7"
      },
      {
        "id": "",
        "name": "d3e936fa36289fd1210047d8f25257bab0608825ed92908dc98c00e33bdb3db2"
      },
      {
        "id": "",
        "name": "e5e43b0830369c39fab45363486da4d21a98c5097ea262c9816997f11c73c1c4"
      },
      {
        "id": "",
        "name": "ee2d34ac98eaf1451d19fdc99f0bb52db1db60f71933a91f5655af0703ff2464"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "linked-people.com"
      },
      {
        "id": "",
        "name": "sedaliarealty.net"
      },
      {
        "id": "",
        "name": "catalyst-ltd.net"
      },
      {
        "id": "",
        "name": "linked-hr.com"
      },
      {
        "id": "",
        "name": "domawe.net"
      },
      {
        "id": "",
        "name": "sinjim.net"
      },
      {
        "id": "",
        "name": "staruxaproruha.com"
      },
      {
        "id": "",
        "name": "golinked.net"
      },
      {
        "id": "",
        "name": "dmtn-tv.net"
      },
      {
        "id": "",
        "name": "crewlworkinew.com"
      },
      {
        "id": "",
        "name": "dapala.net"
      },
      {
        "id": "",
        "name": "teamsvoicehub.com"
      },
      {
        "id": "",
        "name": "linkedplus.org"
      },
      {
        "id": "",
        "name": "linkedwith.org"
      },
      {
        "id": "",
        "name": "tronscaner.net"
      },
      {
        "id": "",
        "name": "linked-on.com"
      },
      {
        "id": "",
        "name": "novayastaruxa.com"
      },
      {
        "id": "",
        "name": "candipoker.net"
      },
      {
        "id": "",
        "name": "indeed-jobs.net"
      },
      {
        "id": "",
        "name": "kevinnotanother.com"
      },
      {
        "id": "",
        "name": "1006326830900030409.com"
      },
      {
        "id": "",
        "name": "ai-like.net"
      },
      {
        "id": "",
        "name": "idrci.net"
      },
      {
        "id": "",
        "name": "uslinked.org"
      },
      {
        "id": "",
        "name": "linkedall.org"
      },
      {
        "id": "",
        "name": "mtg-life.net"
      },
      {
        "id": "",
        "name": "indeedhiring.com"
      }
    ]
  },
  "external_refs": [
    {
      "id": "d47d8759-0744-48e2-a027-adf41213ce30",
      "standard_id": "external-reference--39517ece-08d9-595f-a508-ef54c81011d2",
      "entity_type": "External-Reference",
      "source_name": "AlienVault",
      "description": null,
      "url": "https://otx.alienvault.com/pulse/6a2201a331661aba15d362d1",
      "hash": null,
      "external_id": "6a2201a331661aba15d362d1",
      "created": "2026-06-05T06:41:45.193Z",
      "modified": "2026-06-05T06:41:45.193Z",
      "createdById": null
    },
    {
      "id": "65cc8074-e263-4646-a95a-8a50fe3fbf2e",
      "standard_id": "external-reference--86c5aa0c-5968-59e6-baed-0a80e681169a",
      "entity_type": "External-Reference",
      "source_name": "AlienVault",
      "description": null,
      "url": "https://www.levelblue.com/blogs/spiderlabs-blog/clickfix-is-now-hiring-from-job-platform-impersonation-to-python-based-rat-delivery",
      "hash": null,
      "external_id": null,
      "created": "2026-06-05T06:41:45.243Z",
      "modified": "2026-06-05T06:41:45.243Z",
      "createdById": null
    }
  ]
}