ClickFix

ACSC Issues Critical Alert on Exploited CMS Vulnerabilities

Cybercriminals Exploit BNB Chain for Malware via Fake CAPTCHAs

New ChainScript RAT Exploits ClickFix Lures with Blockchain C2

EvilTokens Phishing Kit Exploits Microsoft 365 with AI-Driven BEC Tactics

Healthcare Cyberattacks Disrupt Patient Care and Expose Sensitive Data

Fake CAPTCHA Scams Evolve into Malware Delivery Systems

Node.js Exploited in Ransomware Attacks Using EtherHiding Technique

Brevo Supply Chain Attack Infects Over 100,000 Websites with ClickFix Malware

HBO Max Account Compromise Fuels ClickFix Malware Campaign

SilabRAT Trojan Targets Cryptocurrency with Session Hijacking Techniques

DeepLoad Malware Campaign Uses AI for Credential Theft and Evasion

Exvicy Malware Framework Leverages ErrTraffic Codebase

LeakNet Ransomware Expands Tactics with ClickFix and Deno Loader

Venom Stealer MaaS Platform Enables Automated Continuous Data Theft

New Mistic Backdoor Linked to Ransomware Access Broker Activity

TimbreStealer Malware Campaign Targets Mexican Companies with Advanced Evasion Techniques

Mistic Malware Targets Microsoft Endpoint with Stealthy DLL Sideloading Technique

New macOS Malware Campaign Targets Users via Fake Updates and Script Editor

ClickFix and PySoxy Proxying Threatens Cybersecurity with Enhanced Persistence

Malware-as-a-Service Campaign Targets Users with ClickFix and Cruciferra

SloppyRAT: New Remote Access Trojan Fuels Ransomware Operations

Malvertising Campaign Distributes SectopRAT via Fake Claude Desktop App

AI-Powered Phishing Campaigns Render Blocklists Ineffective

Attackers Exploit AI Brand Trust to Distribute Malware

Cybersecurity Tools Fail to Detect 20% of Browser-Based Phishing Attacks

Rise of Mac Infostealers: New Malware Targets macOS Users

Phishing Campaign Exploits Google Storage to Deploy Remcos RAT

Golden Chickens Unveils Four New Modular Malware Families Targeting Chrome Credentials

Ransomware Attack on Berlin Senate: Data Exfiltration and Phishing Vector

Over 5,400 Websites Compromised to Deliver ClickFix Payloads via Blockchain

Emerging Cyber Threats: CRPx0 Ransomware and TeamPCP Supply Chain Attacks

New notnullOSX Malware Targets High-Value Crypto Wallets on macOS

DOUBLECUP Service Delivers Malware via Cached PNG Images

Kash Patel's Based Apparel Site Offline After Crypto Malware Attack

PavinLoader Malware Exploits ClickFix and Fake Downloads to Deploy Amatera Stealer

Fake Codex Installer Delivers Suspected AMOS Infostealer via Google Sites

Threat Actors Exploit npm Mirrors for Phishing Campaigns

ConsentFix and ClickFix: Rapid Hijacking of Microsoft 365 Accounts

TELEPUZ Malware Emerges, Spreading via ClickFix Lures to Steal Data

OkoBot Malware Targets Cryptocurrency Users to Steal Seed Phrases

Malware Spreads via Verified Ads on X Targeting Mac Users

Ransomware Fuels Surge in Global Cyberattacks

Fake Claude Code Downloads Spread Infostealer Malware Targeting Developers

Opera Launches Paste Protect to Combat ClickFix Attacks

Advancements in Cybersecurity: Zero Trust and AI Integration

Brevo supply chain attack hits 100,000+ websites with malware

Hackers hijack HBO Max Reddit account to spread malware

Attackers hijack HBO Max's Reddit account for 48-hour malvertising blitz

ClickFix, the Fake CAPTCHA Attack That Makes You Install Malware Yourself

The latest AI doomsayer is China’s intelligence boss

HBO Max Reddit Hack: 108 Fake Ads Spread Malware

ClickFix attacks are tricking Mac and Windows users into hacking themselves

Using Official Accounts, ClickFix Type Attack Has Spread Across Reddit

Hackers Hijack HBO Max's Reddit Account to Spread Malware via 108 Fake Ads

Hackers Hijack HBO Max Reddit Account to Spread ClickFix Malware

HBO Max Reddit account hijacked for ClickFix malware campaign

Russian Hacker Group Claims DDoS Attack on Norway's Parliament Website

Macsync Stealer C2 Infrastructure Rotation

Hunting Macsync Stealer Infrastructure Through Behavioral Pivots

Russian State

ClickFix Moves into the Browser to Steal Cryptocurrency

“ClickFix” social engineering attacks

ClickFix moves into the browser: Cryptocurrency theft with Google

BSI explains first attack vector on Berlin authorities

Microsoft Security Blog

Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

Microsoft warns fake CAPTCHA is tricking Windows users into running malware

Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks

Attack hides malware in PNGs and drops custom reverse tunnel on victims' machines

CRPx0 - Threat Actor Profile

Hackers litter NPM with packages that don't infect computers

Crooks Push Mac Malware Through Fake OpenAI Codex Ads

Malware-as-a-Service Cocktail: ErrTraffic, Cruciferra, and EDR Evasion

MaaS Campaign Combines ClickFix, ErrTraffic and Cruciferra

Fake AI, real malware: Attackers impersonating AI brands

New Report from Rapid7 Labs: Why Q2 2026 signals the end of traditional patch cycles

Microsoft Warns Hackers Are Hiding Malware Commands Inside BNB Chain Smart Contracts

Hackers Use BNB Chain Smart Contracts to Spread Malware via Fake CAPTCHAs

Hackers exploit BNB Chain smart contracts to distribute malware via fake CAPTCHAs

Browser Attacks Report

DOUBLECUP turns ClickFix into cached PNG delivery for CountLoader and DeviceManager

DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT

LevelBlue found that phishing started 65% of intrusions

Network defenders cannot distinguish DriveTroy's command-polling from any other employee accessing Google Drive