Fake Fixes the World Fell For: Inside the ClickFix Ecosystem

Rushikesh D. Nandedkar

Principle Threat Intelligence Analyst

LinkedInView Profile
Rushikesh D. Nandedkar

Talk Abstract

ClickFix has emerged as one of the most successful social-engineering techniques in modern intrusion operations, exploiting a simple human action — copy, paste, and execute. This talk focuses exclusively on the ClickFix tradecraft itself: how fake verification prompts, browser repair lures, and clipboard-driven execution flows are engineered to manipulate users into launching attacker-controlled commands. Through deep technical analysis of real-world ClickFix variants, the session dissects the evolution of lure design, command staging, payload delivery methods, and the infrastructure patterns that repeatedly surface across campaigns.

About the Speaker

Rushikesh D. Nandedkar

Rushikesh D. Nandedkar

Principle Threat Intelligence Analyst

Rushikesh D. N. is a seasoned cybersecurity researcher and threat intelligence professional with over a decade of experience in offensive security, wireless security, malware analysis, and threat research.

He currently works as a Principal Threat Researcher, focusing on enterprise-scale threat detection, adversary research, exploit analysis, and emerging attack methodologies across modern infrastructure and connected systems.

Over the years, Rushikesh has conducted extensive research in areas including wireless exploitation, covert communication channels, IoT security, reverse engineering, instrumentation, and malware analysis.

His work has been presented at globally recognized security conferences such as Black Hat USA, DEF CON, and BruCON, where he has delivered technical talks and hands-on workshops on topics ranging from BLE and IEEE 802.15.4 exploitation to advanced instrumentation and covert wireless communication techniques.

Rushikesh is passionate about practical security research, offensive tooling, and knowledge sharing within the cybersecurity community. His interests span threat intelligence, exploit research, reverse engineering, and building security tooling that enables defenders and researchers to better understand evolving attack surfaces.

LinkedInView Profile