Corium Panel Packages ClickFix Malware Delivery and Campaign Management
Summary
Hudson Rock describes Corium, an advertised ClickFix panel bundling payload management, deceptive pages, multiple delivery methods, website overlays and campaign analytics. Its functionality and evasion claims remain unverified; no Corium infections are confirmed.
Key points
- A forum user named Cassiopeia advertised Corium on Exploit.IN; the article's evidence is the advertisement and screenshots, not a verified deployment or attributed infection campaign.
- The advertised panel combines payload management, deceptive verification pages, several user-assisted delivery methods, website overlays and campaign analytics.
- Corium promotes 14 DLL-hijacking variations and claims certain execution and evasion capabilities, but the article says these claims are unverified and identifies no fundamentally new exploitation technique.
- The article describes website injection as a possible distribution route and discusses the separate Artlist incident, which it links to credentials exposed through an earlier infostealer infection—not to Corium.
- Suggested defenses include monitoring deceptive verification pages and suspicious command execution, reviewing CMS changes and administrator activity, and investigating exposed credentials.
- Hudson Rock's ClickFix monitoring and API are presented as ways to investigate suspicious pages and infrastructure; the article does not establish Corium's effectiveness, infection volume or customer base.
Article Details
- Event Type
- A cybercrime forum advertisement for Corium, a ClickFix malware-delivery and campaign-management panel.
- Impact
- The advertised panel consolidates deceptive verification pages, multiple user-assisted delivery methods, website integration, payload management, and execution analytics, potentially lowering the effort needed to operate ClickFix campaigns. Its capabilities and evasion claims have not been independently verified, and the article reports no confirmed infection campaign or measured impact attributable to Corium.