🚨 Hackers are using Microsoft’s ClickOnce to deploy stealth malware—no admin rights, no alerts.

Targeting energy, oil & gas, the “OneClik” campaign hides Go-based backdoors via fake sites + AWS. It evades detection, hijacks trusted Windows processes, and mimics Cobalt Strike.

CheckDot is SAFU