自ら悪質コードを貼る「ClickFix」が108%急増、日本被害が最多14%に。
・エラー装いCLIコピペ誘導
・ユーザー権限で検知スルー
・指示に従う日本人が標的
システムでなく「人間をシェル化」する脅威。コマンドコピペ指示は即警戒。
@sarubot.bsky.social
@radiohack.bsky.social📣 New Podcast! "Russian Hackers Use AI to Rebuild Malware: The New Era of Automated Cyber Espionage" on @Spreaker #adaptivemalware #aihacking #aisecurity #anthropic #claudeai #clickfix #credentialtheft #cyberespionage #cybersecurity #cyberwarfare #dnshijacking #infosecurity #malware #osint
@majorlinux.com
@malware-traffic-analysis.net2026-09-11 (Friday): Traffic analysis exercise. I generated an infection through #KongTuke #ClickFix activity. Not sure what the malware is, but I'm sharing #pcap as an exercise, while others might find the malware files and other info useful. www.malware-traffic-analysis.net/2026/09/11/i...
@bizbln.bsky.socialClickFix ransomware uses fake CAPTCHAs and update prompts to steal data on Windows Mac Linux! PowerShell binaries evade AV! #ransomware #ClickFix #cybersecurity #infosec #malware
@phusion.bsky.social#ClickFix attacks infecting PCs and Macs are going viral | #malware #netsec #security | arstechnica.com/security/202...
@hendryadrian.bsky.socialZscaler ThreatLabz found SloppyRAT, a new malware family likely tied to ransomware ops. It uses a ClickFix infection chain, anti-analysis tricks, EtherHiding C2 resolution, and remote command execution. #SloppyRAT #ClickFix #EtherHiding
@threadlinqs.bsky.socialMacSync Stealer poses as Claude AI, tricks you into pasting one Terminal command, then drains your Mac. https://intel.threadlinqs.com/threat/TL-2026-2434 #ThreatIntel #MacSync #Macc #ClickFix
@securityonline.bsky.socialA new ClickFix browser attack uses Google Sheets as C2 to inject a web skimmer into Chrome, stealing 0.159 BTC from cryptocurrency swap users.
#ClickFix #BrowserAttack #GoogleSheets #WebSkimmer #Crypto #CiscoTalos #Tampermonkey
@thedailytechfeed.comMac malware is evolving—stealers, ClickFix, supply-chain threats dominate. OBTS v9 will go deep. #macOS #Cybersecurity #Malware #Moonlock #OBTS #ClickFix #Stealer https://thedailytechfeed.com/mac-threats-heat-up-in-2026-clickfix-stealers-obts-v9-take-the-stage/
@thedailytechfeed.comGoogle Sheets are being weaponized to swap crypto wallet addresses via fake bonus schemes — stay alert. #CryptoSecurity #BrowserExploits #GoogleSheets #WalletHijack #ClickFix #Infosec https://thedailytechfeed.com/google-sheets-hijacked-in-new-crypto-wallet-address-swap-scam/
@securityonline.bsky.socialA ClickFix browser attack uses Google Sheets C2 to inject a crypto web skimmer into Chrome. See how Cisco Talos traced the theft.
#ClickFix #WebSkimmer #CryptoTheft #CiscoTalos #Malware #BrowserSecurity #Tampermonkey #InfoSec
@cyfar.ca@talosintelligence.com
Attackers use Google Sheets C2 and Tampermonkey to inject web skimmers that replace crypto deposit addresses.
-
IOCs: docs[.]google[.]com, paste[.]sh
-
#ClickFix #Malware #ThreatIntel
@diesec.bsky.socialTerminalFix: fake CAPTCHA tricks users into pasting PowerShell, creating a pivot into the network. BSI confirms a German state institution hit (unnamed). Same cluster as Berlin's Rhysida breach, per heise.
diesec.com/2026/09/term...
diesec.com/de/2026/09/t...
#CyberSecurity #ClickFix
@thenewoil.orgOver 5,400 hacked sites serve #ClickFix payloads stored on the #blockchain
@ahmandonk.bsky.social📰 Lebih dari 5.400 Situs Diretas untuk Menyebarkan Payload ClickFix dari Blockchain
👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/07/clickfix-blockchain-5400-situs-diretas/
#blockchain #clickfix #cybercrime #cybersecurity #keamananSiber #malware #prestashop #teknologi #wordpress
@derdreschi84.bsky.socialOver 5,400 hacked sites serve ClickFix payloads stored on the blockchain
#ClickFix
@gadgetflux.bsky.socialThousands of Sites Serve Malware Over Blockchain – New WebRTC Technique Hides Attack
#CyberSecurity #Malware #Blockchain #WebRTC #WordPress #PrestaShop #InfoSec #GadgetFlux #Hacking #SmartContract #BNBChain #ClickFix #CyberThreats #DigitalSecurity