← Back to feed
Threat Actors & CampaignsEmerging1 sourceApr 30, 2026 · 13:00via Huntress Blog

ClickFix Removes Your Background but Leaves the Malware

Brief

Your background is gone, but malware is here. Huntress breaks down BackgroundFix, a new ClickFix social engineering tactic involving CastleLoader, NetSupport RAT, and CastleStealer. Read the analysis.

Read more on Huntress Blog