Published 2026-08-07Status as last assessed: Active
ScreenConnect via a fake SSA site
Reported by Microsoft Threat Intelligence
Targets Windows
- Indicators
- 1
- First seen
- 2025-06-02
Campaign index
Every ClickFix campaign on record, page 3
A campaign is one operation as described by the people who documented it. This is page 3 of the index, ordered newest first. Start at the beginning for what each record contains and how it is built.
44 published records · page 3 of 3
- Published 2026-08-07Status as last assessed: Active
MintsLoader from Storm-0426
Reported by Microsoft Threat Intelligence
Targets Windows
- Indicators
- 2
- First seen
- 2025-03-26
- Published 2026-08-07Status as last assessed: Dormant
DarkGate from Storm-1607 mail
Reported by Microsoft Threat Intelligence, Proofpoint
Targets Windows
- Indicators
- 16
- First seen
- 2024-03-01
- Published 2026-08-07Status as last assessed: Active
Lampion via a Portuguese tax lure
Reported by Microsoft Threat Intelligence, Unit 42, Palo Alto Networks
Targets Windows
- Indicators
- 55
- First seen
- 2025-05-06