Potemkin Loader & RMMProject The Anatomy of a ClickFix Attack

T1Covered by 1 source · first reported by Huntress at 16 Jun, 14:00 UTC

A ClickFix infection drops Potemkin loader and RMMProject RAT, leading to browser theft, hidden remote desktop, and lateral movement across over 11 hosts.