Lampion ClickFix PowerShell Execution Detection

Aaron Mog@AaronMogS2S

•updated May 12, 2025•2•0•20

Detects initial PowerShell execution indicative of the Lampion ClickFix threat leveraging download and execution patterns.