A new variant of the ClickFix attack technique uses cached browser data to execute payloads, circumventing standard Windows security restrictions on remote code execution.
Threat actors behind the ClickFix campaign are using DNS TXT records and browser cache pre-fetching to conceal malicious payloads, complicating early-stage detection.