ClickFix attacks, which trick people into running malicious commands themselves, continue to evolve. This latest campaign uses fake Google and Cloudflare verification pages to convince victims to infect their own devices.
A single mistake can install malware that steals passwords and other sensitive data, gives attackers remote access to your computer, or downloads additional malware that can take full control of your system.
We uncovered multiple campaigns using the same infrastructure to deliver malware including HijackLoader, StealC, Remus, Amatera Stealer, CastleLoader, NetSupport, and a Rust-based stealer.
Read more…
Source: MalwareBytes Labs
Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox
Related:
- AI-driven attacks on educational organizations in Latin America and Africa
November 2, 2026
Kaspersky Threat Research has uncovered attacks on educational organizations in Latin America and Africa in which attackers used artificial intelligence to help direct activity inside compromised networks. Researchers traced reconnaissance, credential theft, movement between computers and data collection, including activity that compromised highly privileged administrator accounts. The attackers used CyberStrikeAI, an open-source penetration-testing framework that combines ...
- Germany says lawmakers’ iPhones may have been hacked with spyware
November 2, 2026
The German government is warning politicians and public figures that they were targeted by government-backed spyware, days after Apple began sending out notifications warning victims that their iPhones may have been hacked. Germany’s federal cybersecurity office, known as the BSI, said in a note over the weekend that it had become aware that members of the ...
- Inside the underground fake review trade
November 2, 2026
Recently, our team exposed sophisticated scam kits designed to steal sensitive data and trick consumers. But underground marketplaces are not just for malware and stolen passwords. They also offer services designed to manipulate your opinion of the products and services you buy every day. In our latest research, we examined cybercrime forums where sellers advertise illicit ...
- North Korean hackers blamed for stealing record $6.3B in Binance breach
October 30, 2026
Hackers working for the North Korean regime have been blamed for a record cryptocurrency heist following a cyberattack at crypto exchange Binance. The hackers stole at least $6.3 billion in crypto from the company’s wallets, though about half of that amount was frozen as the stolen crypto traveled across various blockchains, according to security researchers. The ...
- AI used in Aur0ra ransomware testing and execution
October 29, 2026
In May 2026, Counter Threat Unit™ (CTU) researchers published a report on an AI-orchestrated post-exploitation framework that tested the capabilities of multiple vendors’ endpoint detection and response (EDR) solutions, including the Sophos agent. Following a testing phase, Sophos analysts observed the same infrastructure hosting Cobalt Strike in support of Aur0ra ransomware (also known as Aurora ...
- Kaspersky GReAT uncovers attack targeting government-only Windows system in Asia
October 29, 2026
Kaspersky’s Global Research and Analysis Team (GReAT) has uncovered an attack targeting a customized version of Windows 10 used exclusively by government organizations in an Asian country. The attackers used legitimate software components to launch NetamLoader, a previously unknown malware framework that can receive and run additional code while concealing its activity. The team presented ...