A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and ...
Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.
Exploitation of open-source tools allows attackers to maintain persistent access after initial social engineering, warn ReliaQuest researchers ...
A fresh wave of ClickFix attacks is using fake Windows update screens to trick victims into downloading infostealer malware.… ClickFix is a type of social engineering technique that tricks users into ...
A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious ...
Victims are initially lured to the fake pages by malicious Google ads and SEO poisoning. Clicking through takes them to a ...
The malware targets macOS users only and serves commodity infostealers.
A new spin on the ClickFix attack is making the rounds, and it's designed to circumvent some of the strategies organizations have for mitigating them. ClickFix and its slightly more elegant offshoot, ...
Cybercriminals keep getting better at blending into the software you use every day. Over the past few years, we've seen phishing pages that copy banking portals, fake browser alerts that claim your ...
A Toronto college student named Alexandra nearly fell prey to an insidious new scheme masquerading as the CAPTCHA test. It’s a digital wolf in sheep’s clothing. A Toronto college student has issued a ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results