ClickFix Campaign Distributes DarkGate Malware via Fake Word Online Messages

First seen 17 Dec 2025, 11:58 UTC • Gbhackers

•31

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A social engineering campaign named 'ClickFix' is targeting users with fraudulent 'Word Online' error messages to spread DarkGate malware. This attack manipulates users into executing malicious commands, exploiting their trust in common troubleshooting prompts. The campaign specifically imitates a missing browser extension error to deceive victims.

How this analysis works

Attack Flow

Continue Reading

Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign Kimsuky Exploits South Korean Groupware Vendors with New Gomir Variants Russian GRU Hackers Use Fake CAPTCHAs to Compromise Ukrainian Users Rapid7 Reports Surge in Vulnerability Exploitation Outpacing Patching Efforts ACSC Issues Critical Alert on Exploited CMS Vulnerabilities Cybercriminals Exploit BNB Chain for Malware via Fake CAPTCHAs

ClickFix Campaign Distributes DarkGate Malware via Fake Word Online Messages

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading