ClickFix Campaign Generated Via AI Delivers SmartRAT (opens in new tab)

IntroductionIn March 2026, Zscaler ThreatLabz observed multiple instances of typosquatting domains hosting malicious content generated with AI-powered website creation tools. Threat actors are leveraging website builders to create convincing lures quickly and at scale, with capabilities ranging from basic credential theft to a ClickFix campaign that delivers remote access trojans (RATs).In this blog post, ThreatLabz examines a ClickFix campaign impersonating a Brazilian bank to deliver a Powe...