Gbhackers ClickFix Campaign Hijacks Facebook Sessions via Fake Verification Pages
Article Content
Browse articles 
The ClickFix campaign exploits social engineering techniques to steal Facebook session tokens from users. By guiding victims through a fake verification process, attackers have successfully extracted live session credentials directly from browsers. This campaign has expanded significantly since early 2025, with researchers identifying numerous malicious webpages involved in the attack.
Ask AI about this cluster
Answers cite the sources they use
Updated 246d ago How this analysis works
Timeline
2025-01-01
Campaign growth noted since early 2025
Recent
Attackers launched ClickFix campaign
Date unknown
115 malicious webpages identified
More articles in this cluster (2)
Continue Reading
Active Exploitation of Siemens Software Center Vulnerability in ClickFix Campaign Siemens has confirmed that a DLL side-loading vulnerability (CVE-2026-110936) in Siemens Software Center is actively being exploited in malware attacks. The vulnerability allows attackers to execute malicious code by placing a specially crafted DLL in a directory searched by the application. Siemens first disclosed… 
Latrodectus Malware: New Windows Loader Threat Discovered Latrodectus, also known as BlackWidow and IceNova, is a Windows malware loader identified in October 2023. It acts as a backdoor, enabling attackers to download and execute additional malicious payloads. This malware primarily spreads through email campaigns and is linked to the LUNAR SPIDER group, known for…