Back Cybersecuritynews

New DeepLoad Malware Uses ClickFix and AI

Cybersecuritynews •Tushar Subhra Dutta • March 31, 2026

A newly discovered malware named DeepLoad is targeting enterprise environments, turning a single user action into persistent, credential-stealing access that survives reboots and outlasts standard cleanup efforts. What sets this campaign apart is how every stage of the attack was deliberately built to defeat the security controls that most organizations already depend on. DeepLoad arrives […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

DeepLoad Malware Campaign Uses AI for Credential Theft and Evasion A new malware strain named 'DeepLoad' has been identified, capable of stealing credentials from enterprise networks immediately upon infection. The malware employs AI-generated code to obfuscate its logic, making it difficult for traditional security tools to detect. It is distributed via social engineering techniques known as ClickFix, which tricks users into executing commands that install the malware. Once installed, DeepLoad captures stored browser passwords and live keystrokes through a malicious browser extension. The malware utilizes a persistence mechanism that allows it to re-execute even after initial detection efforts. ReliaQuest researchers warn that the AI-driven obfuscation may lead to frequent updates, complicating detection efforts for security teams. The malware's ability to spread to connected USB drives further increases its impact across networks. Organizations are advised to shift their focus to behavioral detection methods to combat this evolving threat. 9 sources 70

New DeepLoad Malware Uses ClickFix and AI

The full story

Extracted Entities

Attack Types (1)

Malware (2)