[Op Report] Velvet Tempest linked to ClickFix campaigns for Termite Ransomware, HoK Activity Observed

A sophisticated Velvet Tempest campaign leveraged deceptive malvertising and living-off-the-land techniques to stage ransomware-related tooling, conduct hands-on reconnaissance, and steal credentials, marking the first public link between ClickFix-style lures and Termite ransomware operations.