A ransomware-as-a-service is running which uses ClickFix for entry, it’s allowing advanced persistent toerags to enter the world’s biggest companies.

Info + what defenders should do.

https://ransom-isac.org/blog/crpx0-clickfix-ransomware-analysis/#what-defenders-should-do