From ClickFix to MaaS: Exposing a Modular Windows RAT and Its Admin Panel

Reported 19 Aug 2026 by otx · Severity: medium

A new ClickFix campaign targets Windows users with a NodeJS-based infostealer delivered via malicious MSI installers. This highly adaptable remote access Trojan minimizes forensic footprints through dynamic capability loading, with core stealing modules and communication protocol