Malware & Threats
The malware steals credentials, installs a malicious browser extension, and can spread via USB drives.
Hi, what are you looking for?
SecurityWeek
All posts tagged "ClickFix"
Malware & Threats
The infection chain includes a fake CAPTCHA page, a Bash script, a Nuitka loader, and the Python-based infostealer.
Malware & Threats
Threat actors replace legitimate commands on the cloned installation webpages with malicious commands.
Malware & Threats
Attackers are using DNS requests to deliver a RAT named ModeloRAT to targeted users.
Malware & Threats
Posing as an ad blocker, the malicious extension crashes the browser to lure victims into installing malware.
Malware & Threats
Fake Booking reservation cancellations and fake BSODs trick victims into executing malicious code leading to RAT infections.
Malware & Threats
ClickFix prompts typically contain instructions for Windows users, but now they are tailored for macOS and they are getting increasingly convincing.
Malware & Threats
The Interlock ransomware group has partnered with the KongTuke TDS to distribute a new RAT variant via FileFix attacks.
Malware & Threats
Researchers identify a previously unknown ClickFix variant exploiting PowerShell and clipboard hijacking to deliver the Lumma infostealer via a compromised travel site.
Malware & Threats
Researchers have discovered and analyzed a ClickFix attack that uses a fake Cloudflare ‘humanness’ check.
Nation-State
North Korea’s Lazarus hackers are using the ClickFix technique for malware deployment in fresh attacks targeting the cryptocurrency ecosystem.
Malware & Threats
The websites of over 100 auto dealerships were found serving malicious ClickFix code in a supply chain compromise.
Malware & Threats
The ClickFix technique has been employed by cybercrime and APT groups for information stealer and other malware deployment.
Phishing
A cybercrime group named Storm-1865 has targeted hospitality organizations via fake Booking.com emails and the use of social engineering.
Artificial Intelligence
Context is the central plank of AI in general, and agentic AI in particular. If an AI system doesn’t have the correct context, it...
Network Security
Artificial Intelligence
Data Protection
Mobile & Wireless
Endpoint Security
A standard non-admin account is sufficient to conduct an attack that exploits legitimate OS behavior rather than software vulnerabilities.
Vulnerabilities
Malware & Threats
Application Security
