From ClickFix to Command: A Full PowerShell Attack Chain | FortiGuard Labs

A highly targeted phishing campaign against Israeli organizations leveraged sophisticated, fully PowerShell-based attack chains with heavy obfuscation and RAT deployment, enabling stealthy data exfiltration and lateral movement while closely mimicking—but not conclusively attributing to—MuddyWater tactics.