# Russia's elite hackers adopt Clickfix to infect devices

Russian advanced persistent threat groups, known for sophisticated cyberattacks, are now using the Clickfix malware delivery tool. This tool, typically used by less skilled criminals, trick users into executing malicious code through fake update prompts. The shift matters because it indicates top-tier hackers are leveraging simpler, widely available methods, potentially increasing the scale and frequency of attacks.

**Importance:** 3/5

## Sources

### Technology
- [Ars Technica](https://arstechnica.com/security/2026/07/now-even-russias-most-elite-hackers-are-using-clickfix-to-infect-devices/) — Thu, 16 Jul 2026 19:28:33 +0000