Do Son State-sponsored hackers from North Korea, Iran, and Russia are now using ClickFix, a cybercrime-born social engineering trick.
TA450
The malware installs AteraAgent, legitimate remote administration software known to be abused by the TA450 hacking group