Tracked topic
… Download Now Related Articles: New macOS stealer campaign uses Script Editor in ClickFix attack New Infinity Stealer malware grabs macOS data via ClickFix lures Popular node-ipc npm package compromised to steal credentials Shai Hulud attack ships signed malicious TanStack, Mistral npm packages Fake… …
New macOS ClickFix attack silently mounts DMGs to push infostealer By Lawrence Abrams June 23, 2026 02:30 PM A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware from malicious disk image DMG files. …
Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks By Bill Toulas June 1, 2026 06:14 PM A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and FakeUpdates techniques on compromised sites. …
Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign By Bill Toulas May 24, 2026 10:12 AM A large-scale campaign is exploiting a critical SQL injection vulnerability CVE-2026-26980 in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. …
… More recently, StealC has been widely used in a variety of ClickFix attacks, such as fake instructional videos on TikTok and FileFix attacks . …
… ClickFix and Browser-Native Social Engineering Both the 2026 DBIR and Keep Aware's State of Browser Security Report call out ClickFix as an emerging technique worth tracking. …
… Other campaigns abused shared ChatGPT and Grok conversations that conducted ClickFix attacks by impersonating software installation guides that instructed victims to execute commands that installed malware. …
… Download Now Related Articles: New macOS stealer campaign uses Script Editor in ClickFix attack New Infinity Stealer malware grabs macOS data via ClickFix lures Popular node-ipc npm package compromised to steal credentials Fake OpenAI repository on Hugging Face pushes infostealer malware GlassWorm … …
… Download Now Related Articles: Popular node-ipc npm package compromised to steal credentials GlassWorm malware attacks return via 73 OpenVSX "sleeper" extensions New macOS stealer campaign uses Script Editor in ClickFix attack New Infinity Stealer malware grabs macOS data via ClickFix lures Suspect… …
… In a technical report this week, cloud security company Zscaler notes that Mistic, which it tracks as MTLBackdoor, was delivered as a payload in a multi-stage ClickFix infection chain in May. …