{
  "name": "The ClickFix Factory: First Exposure of IUAM ClickFix Generator",
  "slug": "the-clickfix-factory-first-exposure-of-iuam-clickfix-generator",
  "description": "Palo Alto Unit42 have uncovered a phishing kit named the IUAM ClickFix Generator that automates the creation of these attacks. The kit is designed to generate highly customizable phishing pages that lure victims by mimicking browser verification challenges often used to block automated traffic. It includes advanced features such as operating system detection and clipboard injection, enabling low-effort, cross-platform malware deployment.",
  "published": "2025-10-10T15:59:02+00:00",
  "created_at": "2025-10-10T15:59:02+00:00",
  "modified_at": "2025-10-13T05:44:37+00:00",
  "created_at_opencti": "2025-10-10T15:59:02+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2025-10-10",
    "captcha",
    "clickfix",
    "clickfix generator",
    "clipboard",
    "deerstealer",
    "infostealer",
    "iuam",
    "macos",
    "odyssey",
    "phishing",
    "rat",
    "remote access"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "88.214.50.3"
      },
      {
        "id": "",
        "name": "45.146.130.132"
      },
      {
        "id": "",
        "name": "45.146.130.129"
      },
      {
        "id": "",
        "name": "188.92.28.186"
      },
      {
        "id": "",
        "name": "38.242.212.5"
      },
      {
        "id": "",
        "name": "45.135.232.33"
      },
      {
        "id": "",
        "name": "194.26.29.217"
      },
      {
        "id": "",
        "name": "45.146.130.131"
      },
      {
        "id": "",
        "name": "185.93.89.62"
      },
      {
        "id": "",
        "name": "83.222.190.214"
      },
      {
        "id": "",
        "name": "treadingveew.last-desk.org"
      },
      {
        "id": "",
        "name": "treadingveew.dekstop-apps.com"
      },
      {
        "id": "",
        "name": "sifld.rajeshmhegde.com"
      },
      {
        "id": "",
        "name": "crm.jskymedia.com"
      },
      {
        "id": "",
        "name": "watchlist-verizon.com"
      },
      {
        "id": "",
        "name": "ttxttx.com"
      },
      {
        "id": "",
        "name": "techinnovhub.co.za"
      },
      {
        "id": "",
        "name": "speedtestcheck.org"
      },
      {
        "id": "",
        "name": "teamsonsoft.com"
      },
      {
        "id": "",
        "name": "ibs-express.com"
      },
      {
        "id": "",
        "name": "fudgeshop.com.au"
      },
      {
        "id": "",
        "name": "quirkyrealty.com"
      },
      {
        "id": "",
        "name": "financementure.com"
      },
      {
        "id": "",
        "name": "favorite-hotels.com"
      },
      {
        "id": "",
        "name": "evodigital.com.au"
      },
      {
        "id": "",
        "name": "emailreddit.com"
      },
      {
        "id": "",
        "name": "coffeyelectric.com"
      },
      {
        "id": "",
        "name": "cloudlare-lndex.com"
      },
      {
        "id": "",
        "name": "claudflurer.com"
      },
      {
        "id": "",
        "name": "asmicareer.com"
      },
      {
        "id": "",
        "name": "apposx.com"
      },
      {
        "id": "",
        "name": "365-drive.com"
      },
      {
        "id": "",
        "name": "tradingviewen.com"
      },
      {
        "id": "",
        "name": "fe8b1b5b0ca9e7a95b33d3fcced833c1852c5a16662f71ddea41a97181532b14"
      },
      {
        "id": "",
        "name": "f2a068164ed7b173f17abe52ad95c53bccf3bb9966d75027d1e8960f7e0d43ac"
      },
      {
        "id": "",
        "name": "ead6b1f0add059261ac56e9453131184bc0ae2869f983b6a41a1abb167edf151"
      },
      {
        "id": "",
        "name": "d81cc9380673cb36a30f2a84ef155b0cbc7958daa6870096e455044fba5f9ee8"
      },
      {
        "id": "",
        "name": "d375bb10adfd1057469682887ed0bc24b7414b7cec361031e0f8016049a143f9"
      },
      {
        "id": "",
        "name": "d110059f5534360e58ff5f420851eb527c556badb8e5db87ddf52a42c1f1fe76"
      },
      {
        "id": "",
        "name": "cd78a77d40682311fd30d74462fb3e614cbc4ea79c3c0894ba856a01557fd7c0"
      },
      {
        "id": "",
        "name": "ba5305e944d84874bde603bf38008675503244dc09071d19c8c22ded9d4f6db4"
      },
      {
        "id": "",
        "name": "9c5920fa25239c0f116ce7818949ddce5fd2f31531786371541ccb4886c5aeb2"
      },
      {
        "id": "",
        "name": "966108cf5f3e503672d90bca3df609f603bb023f1c51c14d06cc99d2ce40790c"
      },
      {
        "id": "",
        "name": "9090385242509a344efd734710e60a8f73719130176c726e58d32687b22067c8"
      },
      {
        "id": "",
        "name": "8ed8880f40a114f58425e0a806b7d35d96aa18b2be83dede63eff0644fd7937d"
      },
      {
        "id": "",
        "name": "82b73222629ce27531f57bae6800831a169dff71849e1d7e790d9bd9eb6e9ee7"
      },
      {
        "id": "",
        "name": "816bf9ef902251e7de73d57c4bf19a4de00311414a3e317472074ef05ab3d565"
      },
      {
        "id": "",
        "name": "7a8250904e6f079e1a952b87e55dc87e467cc560a2694a142f2d6547ac40d5e1"
      },
      {
        "id": "",
        "name": "7881a60ee0ad02130f447822d89e09352b084f596ec43ead78b51e331175450f"
      },
      {
        "id": "",
        "name": "7765e5e0a7622ff69bd2cee0a75f2aae05643179b4dd333d0e75f98a42894065"
      },
      {
        "id": "",
        "name": "72633ddb45bfff1abeba3fc215077ba010ae233f8d0ceff88f7ac29c1c594ada"
      },
      {
        "id": "",
        "name": "6e4119fe4c8cf837dac27e2948ce74dc7af3b9d4e1e4b28d22c4cf039e18b993"
      },
      {
        "id": "",
        "name": "3aee8ad1a30d09d7e40748fa36cd9f9429e698c28e2a1c3bcf88a062155eee8c"
      },
      {
        "id": "",
        "name": "397ee604eb5e20905605c9418838aadccbbbfe6a15fc9146442333cfc1516273"
      },
      {
        "id": "",
        "name": "2b74674587a65cfc9c2c47865ca8128b4f7e47142bd4f53ed6f3cb5cf37f7a6b"
      },
      {
        "id": "",
        "name": "081921671d15071723cfe979633a759a36d1d15411f0a6172719b521458a987d"
      },
      {
        "id": "",
        "name": "039f82e92c592f8c39b9314eac1b2d4475209a240a7ad052b730f9ba0849a54a"
      },
      {
        "id": "",
        "name": "00c953a678c1aa115dbe344af18c2704e23b11e6c6968c46127dd3433ea73bf2"
      },
      {
        "id": "",
        "name": "029a5405bbb6e065c8422ecc0dea42bb2689781d03ef524d9374365ebb0542f9"
      }
    ],
    "malware": [
      {
        "id": "b23f8caa-3acc-45ae-8b97-fdf538b71395",
        "name": "Odyssey",
        "slug": "odyssey"
      },
      {
        "id": "e4395143-7d7c-450d-8a13-7e17a713fdb6",
        "name": "DeerStealer",
        "slug": "deerstealer"
      }
    ],
    "attack_patterns": [
      {
        "id": "f4a450ef-8297-42e5-9e47-01162138baa2",
        "name": "T1115"
      },
      {
        "id": "870bd958-53a3-4d25-9f23-00aa8bd6674d",
        "name": "T1102"
      },
      {
        "id": "c3af9fd7-d307-4df4-9220-cc627938fb85",
        "name": "T1055"
      },
      {
        "id": "7d7ac733-6442-416f-8669-c302dd0843b9",
        "name": "T1036"
      },
      {
        "id": "9b6064e6-a05b-4e95-baf5-34d180bc9221",
        "name": "T1059"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "Canada"
      },
      {
        "id": "",
        "name": "Information Technology"
      }
    ]
  },
  "external_refs": [
    "https://unit42.paloaltonetworks.com/clickfix-generator-first-of-its-kind/",
    "https://otx.alienvault.com/pulse/68e94967bcab143b278f0611"
  ]
}