Akamai reports StrikeStub, a ClickFix PowerShell malware and RAT
Akamai reports on StrikeStub, a ClickFix PowerShell malware and modular RAT; only the headline was reviewed, so read Akamai’s full post.
- Published
- Ecosystem
- Desktops, browsers and mobile
- Exploitation
- Not confirmed. Only the headline of the Akamai research post was available, and it does not state exploitation or victims.
What happened
According to its headline, Akamai published a security research post on 2026-11-12 titled “Dissecting StrikeStub: ClickFix PowerShell Malware and Modular RAT” Akamai. The headline says the post analyses a malware family called StrikeStub, which it labels ClickFix PowerShell malware and a modular RAT (remote access trojan).
The full article could not be reviewed, so this advisory goes no further than the headline. Not confirmed: how StrikeStub is delivered or operates, who is behind it, who has been targeted, what the RAT modules do, any indicators of compromise, and whether it is being used at scale. Akamai is the only outlet in the sources, and no independent verification was available.
Am I affected?
Not confirmed. The headline does not name affected products, versions, platforms or victims, and no CVE is mentioned. Whether your environment is exposed to StrikeStub cannot be determined from the headline alone.
What to do now
- Read the full Akamai post for the technical details, including any indicators of compromise and detection guidance it may contain: Akamai.
- Compare what Akamai publishes with your own environment once you have reviewed it, to decide whether it applies to you.
- Treat any further guidance as not confirmed until it appears in the primary research.