SYMBOLCOMMON_NAMEaka. SYNONYMS
js.iclickfix (Back to overview)

IClickFix


IClickFix is a malicious JavaScript framework deployed on compromised WordPress sites to deliver further malware using the ClickFix social engineering tactic and fake Cloudflare Turnstile CAPTCHA challenge.

References
2026-02-12LevelBlueRodel Mendrez
How ClickFix Opens the Door to Stealthy StealC Information Stealer
IClickFix Stealc
2026-01-29SekoiaAmaury G., Quentin Bourgue, Sekoia TDR
Meet IClickFix: a widespread WordPress-targeting framework using the ClickFix tactic
IClickFix

There is no Yara-Signature yet.