Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.
"One spreadsheet, five ways to outgrow it, five tools that fix it.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results