Compromised Site -> #ClickFix
Malicious Domain:
vivid-flicker-anvil-creoen[.]pro
urlscan.io/search/#vivi...
#malware
@masaomi346.bsky.social
@masaomi346.bsky.socialCompromised Site -> #ClickFix
Malicious Domain:
vivid-flicker-anvil-creoen[.]pro
urlscan.io/search/#vivi...
#malware
@kindauthors.bsky.social
@cyfar.ca@huntress.com
Malicious GPT lures a user into running a shell command, stealing a Microsoft session cookie and hiding invoice fraud with an inbox rule.
-
IOCs: (None identified)
-
#BEC #ClickFix #ThreatIntel
@qiita-trending.bot.chrs.toClickFixを踏んでしまったので、macOS上で何が起きたのか解析した
@utilvo.bsky.social⚠️ Threat: Fake ClickFix CAPTCHAs trick users into running rogue PowerShell scripts via Win+R, infecting PCs.
🛡️ Utilvo Shield: Unmasks fake verification widgets and defuses malicious clipboard poisoning in real time.
@kitafox.bsky.socialHackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks（検索広告と転送機能を悪用した偽Claude導入ページへの誘導） #BleepingComputer (Oct 9)
#Claude偽サイト #ClickFix #検索広告悪用 #Bingリダイレクト #macOS端末防御
www.bleepingcomputer.com/news/securit...
@kitafox.bsky.socialInside AvisLoader: A Windows Malware Loader Built to Resist Disruption（P2P通信で遮断を回避するWindowsローダーAvisLoaderの分析） #BleepingComputer (Oct 12)
#AvisLoader #ClickFix #ToxP2P #C2通信 #端末検知
www.bleepingcomputer.com/news/securit...
@thenewoil.org
@sergioiker.bsky.social7/7 💰 TypeSafe AI (Jev) raised $870M at $7.5B. 🛡️ SonicWall SMA1000 CVE-2026-102255 is being probed 3 days after its patch. Patch now. #AI #Cybersecurity #InfoSec #AgenticAI #ClickFix #LatAm
@securityonline.bsky.socialA sophisticated macOS Claude malvertising attack weaponizes Google ads and Bing redirects to trick users into executing malicious ClickFix payload scripts.
@threadlinqs.bsky.socialAvisLoader's C2 runs over Tox P2P - no domain to sinkhole, delivered by fake DocuSign ClickFix lures. https://intel.threadlinqs.com/threat/TL-2026-3362 #ThreatIntel #AvisLoader #UACMe #ClickFix
@ransomnews.online🚨🤖 Fake Claude ads deliver ClickFix attacks
#Google Ads abuse Bing redirects to push malicious Mac commands.
🔗 read more: www.bleepingcomputer...
@threadlinqs.bsky.socialCrocoRat hides its payload in DNS TXT records - ClickFix gets a stealthy new twist. https://intel.threadlinqs.com/threat/TL-2026-3283 #ThreatIntel #CrocoRat #ZLib #ClickFix
@nuke86.rfeed.itUAC-0277: oltre 100 siti ucraini trasformati in trappole ClickFix per distribuire Lunex Stealer via smart contract
il blog: insicurezzadigitale.com/uac-0277-olt...
#cybersecurity #byovd #clickfix #cyberwar #infosec #malware #phishing #trojan #ukraine
💬 Il forum: internet-forum.it/t/stanza-sec...
@allaboutsecurity.bsky.socialClaude ClickFix: Angreifer missbrauchen Google Ads und Bing-Weiterleitungen - Über eine kompromittierte Website landeten Nutzer auf einer gefälschten Claude-Downloadseite. Die Technik trägt den Namen „Adception“.
@cyfar.ca~Spiderlabs~
ClickFix uses PhantomPolia, PowerShell and Donut-packed AutoIt shellcode to deliver Remus Stealer.
-
IOCs: cloudcheckic[.]com, spogear[.]click, voderlence[.]com
-
#ClickFix #Malware #ThreatIntel
@yossishow.bsky.socialFake Cloudflare checks on over 100 compromised sites prompted Windows users to run commands that install LunexStealer, according to CERT-UA reporting. The campaign was discovered in September. Do not run commands to prove you are human. #TDFP #TheDigitalFreePress #Cybersecurity #ClickFix
@hackread.bsky.socialOver 100 Ukrainian websites were hacked to show fake Cloudflare checks that tricked visitors into installing Lunex Stealer, which steals passwords, browser data and crypto wallets.
Listen/Read: hackread.com/ukrainian-we...
@thetransmitted.comХакери скомпрометували понад 100 сайтів, щоб заразити українських користувачів шкідливим програмним забезпеченням для викрадення д…
#CERT-UA #ClickFix #Lunex #Кібербезпека #Шкідливе_ПЗ
@thetransmitted.comClickFix — техніка соціальної інженерії, яка перетворює жертву на механізм для здійснення атаки.
#ClickFix #Кібератаки #Кіберзлочинність #Соціальна_інженерія
https://thetransmitted.com/shho-take-ataka-klikfiks-clickfix-attack/