Event JSON
{
"id": "0d626c66984f175de3b7cea6632c7c5c47deb5d7a4ed286a676081c5ca0259d7",
"pubkey": "662250ce4d037de109a64a6a0230f7899f922b76346388b3e7ca06fe9490358d",
"created_at": 1781921831,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@briankrebs/116780029181293028",
"web"
],
[
"t",
"clickfix"
],
[
"t",
"gizmodo"
],
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/780/021/213/611/495/original/e045bc03124cb654.png",
"m image/png"
],
[
"proxy",
"https://infosec.exchange/users/briankrebs/statuses/116780029181293028",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/briankrebs/statuses/116780029181293028",
"pink.momostr"
],
[
"-"
]
],
"content": "Don't look now, but it seems Gizmodo's homepage is now serving up a Clickfix attack.\n\nBasics of the Click-Fix exploit, which causes a pasted URL to fetch malware via Windows Powershell. \n\nhttps://krebsonsecurity.com/2025/03/clickfix-how-to-infect-your-pc-in-three-easy-steps/\n\n#clickfix #gizmodo\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/116/780/021/213/611/495/original/e045bc03124cb654.png\n",
"sig": "3bd6edaa1cfa04632a9e5331d4a747505871e2536cb360c94b5513da259a24d40bd50887972c4d9f589df81e1a3e9670e4230f47ecced08bbb8fea8a56487346"
}