ClickFix

02 A Go-based malware delivered in ClickFix attacks targeting macOS users is stealing cryptocurrency assets, browser-stored passwords, Apple Keychain data, and cached credentials.

03 A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web browser's cache.

04 ClickFix-style threat campaigns are using a new trick to evade detection and deliver Amatera, an increasingly prevalent infostealer.

05 Hackers are abusing legitimate Bing search-result redirects as click URLs in Google search ads to direct users to fake Claude installers that deliver ClickFix attacks.

06 DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by victims' browsers

07 ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment, or a file on disk.

08 ClickFix is a rising security threat that tricks Mac and Windows users into hacking themselves via fake HBO Max ads on Reddit.

09 TELEPUZ is full-featured, lightweight, and modular.

10 Over 5,400 hacked small-business websites serve ClickFix payloads stored in smart contracts on the BNB Smart Chain.

11 A macOS ClickFix operation spanning more than 250 front-end domains now fingerprints visitors before deciding whether to show them a malware lure.

12 Paste Protect blocks ClickFix-style attacks that trick users into executing malicious commands through social engineering.

13 Multiple extensions for Google Chrome and Microsoft Edge delivered a malware framework that deployed modules to steal cryptocurrency, sensitive data, and browser history, as well as inject ClickFix lures.

14 The attack vector is available for rent at scale, and evades AV and EDR, leaving YARA analysis as the best detection option.

15 Custom variants of OpenAI's ChatGPT promoted in sponsored Google results are directing unsuspecting users to malicious sites that use ClickFix attacks to deliver malware.