<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Clipboard-Injection — PoC Archive</title><link>https://poc.intelseclab.com/tags/clipboard-injection/</link><description>Latest proof-of-concept entries.</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Mon, 27 Jul 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://poc.intelseclab.com/tags/clipboard-injection/index.xml" rel="self" type="application/rss+xml"/><item><title>ClickFix Social-Engineering Technique — Fortinet-Branded Multi-Stage Lure (Fake File-Access Page + Fake CAPTCHA + Clipboard Injection)</title><link>https://poc.intelseclab.com/pocs/social-engineering/2026-07-27_clickfix-fortinet-lure-multistage/</link><pubDate>Mon, 27 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/social-engineering/2026-07-27_clickfix-fortinet-lure-multistage/</guid><description>High severity — social-engineering · N/A (social-engineering technique, not a software vulnerability). Status: PoC (inert placeholder payload). Affects: Human victims via a browser-rendered phishing lure; end effect targets Windows Run dialog / PowerShell. Tags: clickfix, fake-captcha, clipboard-injection, brand-impersonation, social-engineering, phishing, run-dialog, multistage-lure.</description><category>social-engineering</category><category>High</category><category>clickfix</category><category>fake-captcha</category><category>clipboard-injection</category><category>brand-impersonation</category><category>social-engineering</category><category>phishing</category><category>run-dialog</category><category>multistage-lure</category></item><item><title>ClickFix Social Engineering Technique — Fake Cloudflare Turnstile Just a Moment Verification Lure</title><link>https://poc.intelseclab.com/pocs/social-engineering/2026-07-27_clickfix-cloudflare-turnstile-lure/</link><pubDate>Mon, 27 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/social-engineering/2026-07-27_clickfix-cloudflare-turnstile-lure/</guid><description>High severity — social-engineering · N/A (social-engineering technique, not a software vulnerability). Status: PoC (benign placeholder payload). Affects: Human victim / browser + Windows Run dialog (Win+R) — no software vulnerability, this is a social-engineering lure page. Tags: clickfix, fake-captcha, cloudflare-turnstile-lure, clipboard-injection, social-engineering, phishing, run-dialog, multilingual-lure.</description><category>social-engineering</category><category>High</category><category>clickfix</category><category>fake-captcha</category><category>cloudflare-turnstile-lure</category><category>clipboard-injection</category><category>social-engineering</category><category>phishing</category><category>run-dialog</category><category>multilingual-lure</category></item><item><title>ClickFix Fake-CAPTCHA Social-Engineering Kit with IP Fencing and 19-Language Localization</title><link>https://poc.intelseclab.com/pocs/social-engineering/2026-07-27_clickfix-fake-captcha-ip-fencing-i18n/</link><pubDate>Mon, 27 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/social-engineering/2026-07-27_clickfix-fake-captcha-ip-fencing-i18n/</guid><description>High severity — social-engineering · N/A (social-engineering technique, not a software vulnerability). Status: PoC (benign placeholder payload). Affects: End users of Windows workstations (via Run dialog / PowerShell paste-and-execute); no vulnerable software component. Tags: clickfix, fake-captcha, clipboard-injection, ip-fencing, localization, social-engineering, phishing, run-dialog, cloudflare-worker.</description><category>social-engineering</category><category>High</category><category>clickfix</category><category>fake-captcha</category><category>clipboard-injection</category><category>ip-fencing</category><category>localization</category><category>social-engineering</category><category>phishing</category><category>run-dialog</category><category>cloudflare-worker</category></item><item><title>ClickFix Fake reCAPTCHA to mshta/HTA Execution Chain</title><link>https://poc.intelseclab.com/pocs/social-engineering/2026-07-27_clickfix-recaptcha-phish-mshta-hta/</link><pubDate>Mon, 27 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/social-engineering/2026-07-27_clickfix-recaptcha-phish-mshta-hta/</guid><description>High severity — social-engineering · N/A (social-engineering technique, not a software vulnerability). Status: Weaponized (educational/benign demo payload). Affects: Human victim / Windows Run dialog (Win+R) or PowerShell/cmd, via mshta.exe. Tags: clickfix, fake-captcha, clipboard-injection, mshta, hta, social-engineering, phishing, run-dialog, recaptcha-impersonation.</description><category>social-engineering</category><category>High</category><category>clickfix</category><category>fake-captcha</category><category>clipboard-injection</category><category>mshta</category><category>hta</category><category>social-engineering</category><category>phishing</category><category>run-dialog</category><category>recaptcha-impersonation</category></item></channel></rss>