User ClickFix Indicators

Danny Y@zendannyy

•updated Apr 10, 2026•35•1•798

Rule looking for explorer and the user activity Reg Key indicating interactive commands, along with several malicious indicators around "clickfix" campaigns