MIMICRAT: ClickFix Campaign Delivers Custom RAT via Compromised Legitimate Websites — Elastic Security Labs

Elastic Security Labs uncovered a sophisticated, multi-stage ClickFix campaign leveraging compromised legitimate websites to deliver MIMICRAT—a custom, stealthy remote access trojan with advanced evasion, token theft, and proxy capabilities—highlighting a significant escalation in attacker tradecraft and operational reach.