NEW CLICKFIX ATTACK LEVERAGES WORKFLOWY FOR STEALTHY MALWARE DELIVERY

Summary from the TLDR InfoSec newsletter

Atos researchers identified a ClickFix variant that trojanizes WorkFlowy's .asar archive to execute a C2 beacon with user privileges before the legitimate application initializes, bypassing Microsoft Defender for Endpoint by avoiding scripting engines and living-off-the-land binaries.