Cyberattackers Exploit DNS TXT Records in ClickFix Script to Execute Malicious PowerShell Commands

A new evolution in the “ClickFix” social engineering campaigns, dubbed KongTuke. This latest variant, observed actively since late December 2025, distinguishes itself by leveraging DNS TXT records to stage and retrieve malicious payloads, marking a significant shift in evasion tactics. The “ClickFix” technique typically involves compromising legitimate websites or creating fake landing pages that display a deceptive “Verify […]

The post Cyberattackers Exploit DNS TXT Records in ClickFix Script to Execute Malicious PowerShell Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.