News New DOUBLECUP ClickFix service hides malware in browser cache images
A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by v...
ClickFix
News 
News ESET tracks rise in malicious AI skills and adaptable malware
The first half of 2026 shows how attackers continue to improve the efficiency and scalability of their operations. Rathe...
News Steam forum ClickFix attacks infect gamers with XMRig cryptominers
Steam discussion forums are being abused in ClickFix attacks that pretend to be fixes for game and computer problems but...
News マイクロソフト、顧客を対象としたACRスティーラー攻撃の急増について警告
マイクロソフトは、ACR Stealerマルウェアを用いて、企業顧客からブラウザに保存されたパスワード、認証トークン、および機密文書を盗み出す攻撃が急増していることを確認しました。 4月下旬から6月中旬にかけて、攻撃者は「ClickFix」...
News ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds
It can start with something as mundane as dragging a link into your browser. Three seconds later, a threat actor has the...
News Opera rolls out Paste Protect feature to fight ClickFix attacks
Opera has introduced Paste Protect, a security feature designed to block ClickFix-style attacks that trick users into ex...
News New macOS ClickFix attack silently mounts DMGs to push infostealer
A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware f...
News Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks
A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and Fa...
News Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign
A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject mali...
News オーストラリア、Vidar Stealerマルウェアを押し付けるClickFix攻撃を警告
オーストラリア・サイバーセキュリティセンター（ACSC）は、情報窃取マルウェア「Vidar Stealer」を配布するソーシャルエンジニアリング手法「ClickFix」を使用したマルウェアキャンペーンが進行中であるとして、各組織に注意を呼び...