Tag: ClickFix
Lunex stealer blinds endpoint defenses with a vulnerable AMD driver
A steal-everything platform called Lunex disables endpoint defenses through a vulnerable AMD driver before it grabs browser and wallet data.
A placeholder web address in 1,700 repos now serves malware
The documentation stand-in third-party[.]com has been weaponised, serving a ClickFix lure that poisons the clipboard on Windows machines.
A forgotten Cloudflare key turned 100,000 sites into a malware channel
Attackers used a long-lived Cloudflare API key stored in Brevo's own source code to push malware through the marketing platform's…
Hijacked HBO Max account floods Reddit with ClickFix ads
A verified HBO Max Reddit account pushed 108 malicious ads in 48 hours, part of a broader operation spreading infostealers.
Fake Cloudflare page on Indian IT agency site pushed terminal commands
A government-linked Indian IT portal served a fake Cloudflare check that tried to get visitors to run a copied command.
Signed node.exe is latest cover for malware delivery, Symantec finds
Symantec documents attackers abusing signed node.exe to run JavaScript payloads in intrusions since February.
CRPx0 ransomware service says victim list jumped past 48 firms
CRPx0's white-label ransomware service claims 48 victims as ClickFix lures spread to Windows and macOS.
TerminalFix turns fake CAPTCHA pages into network backdoors
Microsoft tracks a ClickFix variant that drops a Python reverse tunnel through fake CAPTCHA overlays.