TLDR Tech / InfoSec
New ClickFix attack leverages WorkFlowy for stealthy malware delivery
Atos researchers have identified a new variant of the ClickFix attack that exploits WorkFlowy's .asar archive. This method trojanizes the archive to execute a Command and Control (C2) beacon with user privileges before the legitimate application even initializes. This technique effectively bypasses Microsoft Defender for Endpoint by avoiding traditional scripting engines and living-off-the-land binaries.
Read the full story