# ClickFix Campaign at Artlist: A Cyber Attack Originating from an Employee's Computer An Infostealer infection on a former employee's computer led to a sophisticated attack on Artlist's subdomain. - **Source:** [Blackhat Library: Hacking techniques and research](https://brifing.si/source/db9781c6-35bf-45b9-adcf-0c48b6e0ed91) - **Published:** 2026-07-14 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/cb97de9b-bfa9-4c55-97d5-3493415b6083 ## Discovery of the Attack Hudson Rock researchers detected a sophisticated cyber attack campaign called ClickFix on a subdomain of the digital asset platform Artlist. The attack posed a serious threat to the platform's security. ## Starting Point Investigations revealed that the breach originated from an Infostealer malware infection on a former Artlist employee's computer. This infection provided attackers with access to critical information. ## ClickFix Campaign The ClickFix campaign aimed to steal personal data by redirecting users to fake software updates. Using Artlist's subdomain increased the attack's credibility. ## Impact of the Attack The attack compromised the security of Artlist users and damaged the platform's reputation. The company quickly resolved the issue, informed users, and strengthened security measures. ## Cybersecurity Lessons This incident highlighted the importance of securing former employees' computers. Companies should tighten security protocols during employee departures. ## Next Steps Artlist and similar platforms must take more proactive measures against cyber attacks. Users should also be cautious of fake updates and follow official channels. ## Sources covering this story - https://www.reddit.com/r/blackhat/comments/1uw50m0/how_an_infostealer_infection_led_to_a/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._