Macfinger ClickFix fake CAPTCHA telemetry beacon (/collect, /t.js)
Detects network traffic associated with the 'ClickFix' technique, where malicious websites masquerade as legitimate CAPTCHA or bot-protection services to exfiltrate visitor telemetry via POST requests or fetch malicious script overlays.
Suricata
