Thursday, 18 December

Thursday, 18 December2025

Interlock Ransomware Uses Deceptive "ClickFix" to Execute Malicious Commands

Interlock Ransomware Uses Deceptive "ClickFix" to Execute Malicious Commands
Interlock ransomware—first identified in September 2024—is leveraging the deceptive ClickFix social engineering tactic to trick users into pasting malicious PowerShell commands into the Windows Run dialog. Victims often encounter fake CAPTCHA or “fix this issue” prompts on legitimate but compromised sites. The resulting payload deploys remote access Trojans & initiates a doubleextortion scheme stealing data before encrypting systems. Multiple U.S. agencies have issued alerts as threat escalates.

Download the TechShots App

IT Trends Move Fast. Stay Faster.

Subscribe To Our Newsletter.

Full Name
Email