Weekly Recap — 2026-07-13 -> 2026-07-20
ClickFix Goes Industrial as Zero-Day Chains Shatter Perimeter Defenses ClickFix has matured from a clever social-engineering trick into a full criminal industry this week, with subscription-based attack kits and new variants targeting Mac users through Google ads for Claude AI chats. The technique tricks people into pasting malicious commands via fake CAPTCHA prompts, and because it leverages trusted system tools, endpoint security products are structurally blind to the execution chain. Multiple malware families including TELEPUZ, ACR Stealer, and MacSync Stealer adopted ClickFix as their delivery method, and their control servers increasingly hide on blockchains where takedown is nearly impossible. Attackers simultaneously punched through perimeter defenses with chained zero-day exploits: UTA0533 combined two SonicWall SMA flaws (CVE-2026-15409 and CVE-2026-15410) for root-level remote code execution on VPN appliances, while three chained vulnerabilities in Siemens ROX II industrial switches enable persistent root compromise. Microsoft confirmed two actively exploited zero-days (CVE-2026-56155 and CVE-2026-56164) in its July Patch Tuesday, and forgotten UEFI shim bootloaders undermine Secure Boot on most modern PCs. AI continues arming both sides — a solo criminal built a botnet in six minutes using Gemini, while Iranian state hackers accelerated phishing and malware development with LLMs. Defenders should immediately patch the two Microsoft zero-days already exploited in the wild, update any SonicWall SMA VPN appliances against the chained zero-day attack, and train staff that legitimate websites never ask you to copy-paste commands into Terminal or the Run dialog.
Detection / Hunteropenrouter
By the Numbers
- Total articles: 50
- By severity: Critical: 7, High: 36, Informational: 1, Low: 3, Medium: 3
- By category: APT: 6, general security news: 9, malware: 17, phishing/social engineering: 4, threat actor: 3, vulnerability: 11
Top Threats
ClickFix MaaS Industrialization and Cross-Platform Expansion
ClickFix has evolved from a novel social-engineering lure into a mature criminal marketplace, with subscription-based kits selling for $250-$1,800 and variants now targeting macOS through malvertising for AI platforms like Claude. Because victims willingly paste commands using trusted system utilities, EDR and AV products are fundamentally blind to the execution chain — the attack exploits user trust rather than software vulnerability. Blockchain-based C2 resolution via Polygon smart contracts makes infrastructure takedown nearly impossible, while the payload catalog has expanded from infostealers to full RATs, rootkits, and real-time banking web injectors.
- https://www.zscaler.com/blogs/security-research/claudefix-shared-claude-chats-meet-clickfix
- https://www.reversinglabs.com/blog/5-takeaways-from-clickfix-threat-report
- https://www.reversinglabs.com/blog/clickfix-attacks-your-trust
- https://www.levelblue.com/blogs/spiderlabs-blog/clickfix-on-macos-blockchain-powered-infostealer-hidden-inside-compromised-websites
- https://www.microsoft.com/en-us/security/blog/2026/07/16/acr-stealer-two-observed-intrusion-chains-amid-increased-threat-activity/
- https://www.elastic.co/security-labs/telepuz-maas-malware-clickfix
AI as Active Operator and AI Platforms as Attack Surface
Artificial intelligence has crossed from assisting attacks to actively running them: a solo operator built a C2 botnet in six minutes using Gemini, while Iranian APT groups use LLMs to accelerate malware development and phishing volume across multiple campaigns. AI infrastructure has simultaneously become a target-rich attack surface — Langflow's unauthenticated RCE (CVE-2025-3248) converts AI development servers into DDoS botnets, and ServiceNow's AI Platform suffers a critical sandbox escape (CVE-2026-6875). The TuxBot v3 IoT botnet and VoidLink C2 framework further demonstrate LLM-assisted malware development at scale, with AI chain-of-thought comments left verbatim in source code.
- https://www.trendmicro.com/en_us/research/26/g/actor-behind-patriot-bait-used-ai-to-deploy-c2-botnet.html
- https://research.checkpoint.com/2026/ai-security-report-2026/
- https://www.recordedfuture.com/research/iran-ai-asymmetric-playbook
- https://www.akamai.com/blog/security-research/2026/jul/langflow-exploited-build-custom-ddos-gafgyt-botnets
- https://www.akamai.com/blog/security/2026/jul/recon-free-flights-precision-prompt-attacks-ai-agents
- https://www.akamai.com/blog/security/2026/jul/smash-grab-scale-agentic-ai-reshaping-threat-commerce
- https://cloud.google.com/blog/topics/threat-intelligence/ai-assisted-vulnerability-management/
- https://unit42.paloaltonetworks.com/tuxbot-v3-evolution-iot-botnet/
Zero-Day Chaining Against Perimeter and OT Devices
Sophisticated zero-day chaining targeted perimeter and OT devices this week: UTA0533 combined CVE-2026-15409 (SSRF) and CVE-2026-15410 (command injection) for root-level RCE on SonicWall SMA VPN appliances, deploying custom Java webshells and HTTP proxies with boot persistence. Three chained Siemens ROX II vulnerabilities escalate from arbitrary file read to persistent root code execution on industrial switches, while Microsoft confirmed two actively exploited zero-days (CVE-2026-56155, CVE-2026-56164) in AD FS and SharePoint. Forgotten Microsoft-signed UEFI shim bootloaders (CVE-2026-10797) further undermine Secure Boot across most modern PCs, enabling bootkit deployment that survives OS reinstalls.
- https://www.volexity.com/blog/2026/07/17/proxying-to-compromise-sonicwall-secure-mobile-access-0-day-exploitation/
- https://unit42.paloaltonetworks.com/siemens-rox-ii-zero-day-vulnerabilities/
- https://blog.talosintelligence.com/microsoft-patch-tuesday-july-2026/
- https://www.crowdstrike.com/en-us/blog/patch-tuesday-analysis-july-2026/
- https://www.welivesecurity.com/en/eset-research/forgotten-uefi-shims-undermining-secure-boot/
- https://cyber.gc.ca/en/daily-digest/2026-07-16
Supply Chain Attacks Evolve to Bypass Provenance and Install-Time Defenses
The ongoing supply chain poisoning campaign has evolved to defeat common mitigations: the AsyncAPI npm compromise executes at module-import time rather than during installation, rendering the widespread --ignore-scripts defense useless. Valid npm provenance attestations provided no protection because attackers stole a CI/CD bot token to publish through the project's legitimate trusted-publishing pipeline. Brand-impersonation GitHub repositories delivered BoryptGrab-lineage infostealers entirely in memory via DLL side-loading, while malicious NuGet packages used DNS-over-HTTPS to bypass local sinkhole controls — eroding trust in provenance and reputation as reliable safety signals.
- https://socket.dev/blog/asyncapi-supply-chain-attack
- https://www.microsoft.com/en-us/security/blog/2026/07/15/unpacking-asyncapi-npm-supply-chain-compromise-import-time-payload-delivery/
- https://socket.dev/blog/11-malicious-nuget-tools-pose-as-game-cheats
- https://arcticwolf.com/resources/blog/fake-github-repositories-deliver-boryptgrab-lineage-infostealer/
- https://blog.talosintelligence.com/the-serpents-tongue-luring-the-python-out-of-its-den/
- https://asec.ahnlab.com/en/94441/
APT Long Game: Decade-Plus Intrusions and Toolkit Evolution
A China-linked espionage actor resurfaced in Taiwan with the Daxin kernel rootkit alongside the newly discovered Stupig backdoor, which enables pre-authentication SYSTEM command execution from the Windows logon screen — compile timestamps from 2013 suggest up to 13 years of undetected access. GoSerpent continues targeting Southeast Asian government entities with coordinated multi-phase data exfiltration, while HelloNet abuses Russia's ViPNet update system for DLL sideloading persistence against large Russian organizations. Blind Eagle upgraded its ongoing AsyncRAT campaigns with Windows Notification Facility process injection to bypass EDR heuristics, and FSB Centre 16 was formally attributed to a December 2025 attack on Poland's energy grid that could have cut power to 500,000 civilians.
- https://www.security.com/threat-intelligence/daxin-returns-stupig
- https://securelist.com/goserpent-backdoor-in-southeast-asia/120687/
- https://securelist.com/tr/hellonet-vipnet/120700/
- https://www.levelblue.com/blogs/spiderlabs-blog/still-circling-blind-eagles-toolkit-keeps-evolving
- https://www.ncsc.gov.uk/news/uk-and-allies-urge-critical-sectors-to-improve-defences-against-russian-intelligence-targeting
- https://www.elastic.co/security-labs/contagious-interview-malware-svg-steganography
- https://www.huntress.com/blog/sql-injection-attacker-persistence
Trending CVEs
- CVE-2026-56155 (3 mentions) — Privilege escalation in Active Directory Federation Services; confirmed exploited in the wild and added to CISA KEV database Sources: 1, 2, 3
- CVE-2026-56164 (3 mentions) — Missing authentication for critical function in Microsoft SharePoint Server enabling network spoofing; confirmed exploited in the wild and added to CISA KEV Sources: 1, 2, 3
- CVE-2026-15409 (1 mentions) — Pre-authentication SSRF via WebSocket proxy bypass on SonicWall SMA 1000 series; chained with CVE-2026-15410 for root RCE by UTA0533 Sources: 1
- CVE-2026-15410 (1 mentions) — Command injection and path traversal via hotfix rollback on SonicWall SMA 1000 series; chained with CVE-2026-15409 for root-level remote code execution Sources: 1
- CVE-2025-40949 (1 mentions) — Critical (CVSS 9.1) persistent root code execution via task scheduler manipulation in Siemens ROX II OT switches; final step in three-vulnerability exploit chain Sources: 1
- CVE-2025-40947 (1 mentions) — High (CVSS 7.5) privilege escalation via command injection in feature key validation on Siemens ROX II switches; second step in zero-day chain Sources: 1
- CVE-2025-40948 (1 mentions) — Medium (CVSS 6.8) arbitrary file disclosure via insecure xz configuration on Siemens ROX II switches; initial step in zero-day chain Sources: 1
- CVE-2026-6875 (1 mentions) — Critical sandbox escape vulnerability in ServiceNow AI Platform affecting multiple release families; allows breakout from sandboxed execution environments Sources: 1
- CVE-2025-3248 (1 mentions) — Critical unauthenticated RCE in Langflow code validation API; exploited to install customized Gafgyt DDoS botnet with modified RC4 encryption on AI development servers Sources: 1
- CVE-2026-10797 (1 mentions) — Revocation bypass in UEFI shim bootloaders v0.9 and below; PE header vs WIN_CERTIFICATE size discrepancy allows attackers to bypass dbx and MokListX revocations, undermining Secure Boot Sources: 1
- CVE-2026-25089 (1 mentions) — Second-order OS command injection via JSON input on VNC feature in FortiSandbox; actively exploited and added to CISA KEV database Sources: 1
- CVE-2026-39808 (1 mentions) — Unauthenticated authentication bypass and privilege escalation in FortiSandbox; actively exploited and added to CISA KEV database Sources: 1
- CVE-2026-58644 (1 mentions) — Critical deserialization RCE in Microsoft SharePoint; added to CISA KEV database on July 16, 2026 Sources: 1
Sector Trends
- Critical Infrastructure / OT — Three chained zero-days in Siemens ROX II industrial switches enable persistent root compromise of OT network devices, while FSB Centre 16 was formally attributed to an attack on Poland's energy grid. Langflow's RCE vulnerability demonstrates that AI development servers — often deployed as shadow IT with high bandwidth — are being conscripted into DDoS botnets targeting infrastructure. Sources: 1, 2, 3
- Financial Services / Banking — Kratos PhaaS is stealing Microsoft 365 credentials across US and European organizations, while finance-themed phishing has shifted from urgency language to operational business terminology that bypasses secure email gateways. OkoBot's modular framework targets cryptocurrency wallet users in 25+ countries with hardware wallet seed-phrase phishing, and TELEPUZ's WebInjector manipulates banking IBAN fields in real-time via Chrome DevTools Protocol. Sources: 1, 2, 3, 4
- Government / Diplomatic — GoSerpent continues long-term espionage against Southeast Asian government entities with coordinated multi-phase data exfiltration, while HelloNet abuses Russia's ViPNet secure networking update system for persistence. PhantomEnigma compromised at least 20 Brazilian government portals to lend authenticity to malware-laden police phishing emails, and the Daxin/Stupig intrusion in Taiwanese manufacturing may have persisted undetected for over a decade. Sources: 1, 2, 3, 4, 5
- Commerce / Retail — AI bot traffic targeting commerce increased 19% year-over-year, with retail facing over 200 billion application attacks and nearly 3 trillion Layer 7 DDoS attacks in 2025. Iran-aligned hacktivist group 313 Team combines Mirai-derived IoT botnets with browser impersonation to overwhelm ecommerce APIs, while prompt injection attacks on AI shopping agents can bypass payment validation entirely. Sources: 1, 2
- Manufacturing / Industrial — Spirals, a new Rust-based double extortion ransomware, compromised a South Asian IT company moving from initial breach to encryption in under 24 hours. DragonForce ransomware continues ongoing operations against industrial and chemical manufacturing targets in the Middle East, while the Daxin intrusion demonstrates that manufacturing sectors face persistent state-level espionage lasting years. Sources: 1, 2, 3
Notable Incidents
- UTA0533 Chains Two SonicWall SMA Zero-Days for Root RCE — A threat actor chained a pre-auth SSRF (CVE-2026-15409) with a command injection flaw (CVE-2026-15410) to achieve root-level RCE on SonicWall SMA 1000 series VPN appliances, deploying custom KNUCKLEBALL malware with Java webshells, HTTP proxies, and boot persistence — a sophisticated full-chain compromise of perimeter security devices.
- AsyncAPI npm Compromise Delivers Miasma at Import Time — Attackers stole a CI/CD bot token to publish malicious versions through AsyncAPI's legitimate trusted-publishing pipeline, executing payloads at module-import time to bypass the common --ignore-scripts mitigation. Valid npm provenance attestations provided no protection, and the Miasma framework uses decentralized C2 via Nostr, Ethereum, and BitTorrent DHT.
- Daxin Resurfaces Alongside Stupig After Possible 13-Year Intrusion — A China-linked kernel rootkit documented in 2022 resurfaced on a Taiwanese manufacturing host alongside the newly discovered Stupig backdoor, which enables pre-authentication SYSTEM command execution from the Windows logon screen. Compile timestamps from early 2013 and no telemetry until May 2026 suggest the intrusion persisted undetected for up to 13 years.
- Spirals Ransomware Debuts with Sub-24-Hour Encryption — A new Rust-based double extortion ransomware family compromised a South Asian IT company from initial IIS web shell access to domain-wide encryption in under 24 hours, using multiple redundant C2 channels (revsocks, Chisel, Cloudflare tunnel) and systematically uninstalling security tools before deploying via PsExec.
- Patriot Bait Actor Builds C2 Botnet in Six Minutes with Gemini — A solo Russian-speaking criminal used Google Gemini CLI as primary hacking agent to build, deploy, and operate a C2 botnet targeting a dental clinic in just six minutes, with AI handling 89% of text generation and 100% of coding. The entire operation fits in three 5KB text files, making infrastructure disposable and trivially shareable.