Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery
By
[email protected] (The Hacker News)
3d ago
Source
thehackernews.comResearcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Deliverythehackernews.comClickFix, the trick that fools people into running malware by hand, has quietly grown a back office. New research shows the malicious commands behind its fake "prove you're human" pages are now handed out by API-driven servers that give each visitor the same malware in a different disguise. The same research also turned up a new delivery method built to slip past Windows' script scanning.
You might also wanna read
ClickFix Malware Scam Goes Mainstream: Fake CAPTCHA Tests Trick Users Into Infecting Their PCs
The article reports on the "ClickFix" malware scam, a social engineering attack that tricks website visitors into pressing keyboard shortcut
krebsonsecurity.com·14d ago
Over 700 education and tech websites hijacked in ClickFix malware campaign exploiting Ghost CMS flaw
Attackers are exploiting a critical vulnerability in Ghost Content Management System (CMS) to hijack over 700 legitimate websites, including
malwarebytes.com·13d ago
Fake Claude Code Installers on Google Sites Steal Credentials via ClickFix Attack
Cybercriminals are exploiting the popularity of AI developer tools like Claude Code and OpenAI Codex by hosting fake installer pages on trus
cybersecuritynews.com·1mo agoHackers hijack thousands of sites for ClickFix and FakeUpdate attacks
bleepingcomputer.com·1mo ago
ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds
BleepingComputer·2d ago
Opera introduces clipboard security feature to block ClickFix attack vectors
Opera is introducing a new security feature designed to detect and block malicious clipboard content, specifically targeting ClickFix attack
zdnet.com·1d ago
Comments
Sign in to join the conversation.
No comments yet. Be the first.