Attackers Combine ClickFix With PySoxy Proxying to Maintain Persistence (infosecurity-magazine.com)

• Combination of ClickFix and PySoxy
• Persistence after social engineering
• Open-source tools exploited

"ReliaQuest researchers warn of a campaign where attackers combine ClickFix with PySoxy proxying to maintain persistent access after initial social engineering."