MICROSOFT ALERTS ON DNS-BASED CLICKFIX VARIANT DELIVERING MALWARE VIA NSLOOKUP

Summary from the TLDR InfoSec newsletter

There is a new ClickFix variant that uses nslookup commands via the Windows Run dialog to retrieve and execute second-stage payloads through DNS, ultimately deploying the Python-based ModeloRAT remote access trojan.