Do the Core Prevention rules have detections for the "ClickFix" threat?

Products

• Carbon Black Cloud Endpoint Standard

Issue/Introduction

Do the Core Prevention rules for Carbon Black Cloud Endpoint Standard have built-in detections for the ClickFix threat to alert and/or block endpoints that are affected?

Environment

• Carbon Black Cloud Endpoint Standard: Current Version
• Carbon Black Cloud Windows Sensor: All Supported Versions
• Microsoft Windows OS: All Supported Versions

Resolution

Carbon Black Cloud Core Prevention rules are being updated in 25v3 to include detections for the ClickFix threat. This will be available around the June 2025 timeframe.

Additional Information

• ClickFix: The rising threat of social engineering through fake fixes
• ClickFix Deception: A Social Engineering Tactic to Deploy Malware