ClickFix campaigns have adapted to the latest defenses with a new technique to trick users into infecting their own machines with malware.
It turns out that some participants post .blend files, which are used by the popular Blender open-source 3D modeling system.
The hackers use fake CAPTCHA pages—which are designed to mimic standard security checks—to trick users into installing malicious software (“Stealthy StealC Information Stealer”) via keyboard commands.