@nuke86.rfeed.itUAC-0277: oltre 100 siti ucraini trasformati in trappole ClickFix per distribuire Lunex Stealer via smart contract
il blog: insicurezzadigitale.com/uac-0277-olt...
#cybersecurity #byovd #clickfix #cyberwar #infosec #malware #phishing #trojan #ukraine
💬 Il forum: internet-forum.it/t/stanza-sec...
@allaboutsecurity.bsky.socialClaude ClickFix: Angreifer missbrauchen Google Ads und Bing-Weiterleitungen - Über eine kompromittierte Website landeten Nutzer auf einer gefälschten Claude-Downloadseite. Die Technik trägt den Namen „Adception“.
@cyfar.ca~Spiderlabs~
ClickFix uses PhantomPolia, PowerShell and Donut-packed AutoIt shellcode to deliver Remus Stealer.
-
IOCs: cloudcheckic[.]com, spogear[.]click, voderlence[.]com
-
#ClickFix #Malware #ThreatIntel
@yossishow.bsky.socialFake Cloudflare checks on over 100 compromised sites prompted Windows users to run commands that install LunexStealer, according to CERT-UA reporting. The campaign was discovered in September. Do not run commands to prove you are human. #TDFP #TheDigitalFreePress #Cybersecurity #ClickFix
@hackread.bsky.socialOver 100 Ukrainian websites were hacked to show fake Cloudflare checks that tricked visitors into installing Lunex Stealer, which steals passwords, browser data and crypto wallets.
Listen/Read: hackread.com/ukrainian-we...
@thetransmitted.comХакери скомпрометували понад 100 сайтів, щоб заразити українських користувачів шкідливим програмним забезпеченням для викрадення д…
#CERT-UA #ClickFix #Lunex #Кібербезпека #Шкідливе_ПЗ
@thetransmitted.comClickFix — техніка соціальної інженерії, яка перетворює жертву на механізм для здійснення атаки.
#ClickFix #Кібератаки #Кіберзлочинність #Соціальна_інженерія
https://thetransmitted.com/shho-take-ataka-klikfiks-clickfix-attack/
@thedailytechfeed.comClickFix now hides VBScript in browser cache as PNG to dodge Run limits and steal creds #ClickFix #BrowserCache #Malware #Cybersecurity #Windows #ThreatIntel https://thedailytechfeed.com/browser-cache-exploit-lets-clickfix-bypass-windows-run-box-limits/
@reconbee.bsky.socialClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits reconbee.com/clickfix-smu...
#clickfix #payload #windows #bypasswindows #cybersecurity #cyberattack
@hacks.grThis ClickFix variant turns a fake troubleshooting prompt into a request for the user to run a Windows command.
The goal is to steal sign-in details from the browser…
https://en.hacks.gr/i-nea-apati-clickfix-xegela-christes-kai-stocheyei-sta-stoicheia-syndesis-toys/
@cyfar.ca@huntress.com
Endpoint enforcement kills obfuscated ClickFix chains in under a second.
-
IOCs: linkeders[.]net
-
#ClickFix #EDR #ThreatIntel
@thedailytechfeed.comWarning: ClickFix uses fake CAPTCHA + browser cache trick to sneak malware and steal credentials. #Malware #ClickFix #CyberSecurity #BrowserCache #CredentialTheft #SocialEngineering https://thedailytechfeed.com/new-clickfix-fake-captcha-attack-uses-browser-cache-to-deliver-malware/
@masaomi346.bsky.socialCompromised Site -> #ClickFix
Malicious Domain:
ohhhhhmoney[.]com
urlscan.io/search/#ohhh...
#malware
@threadlinqs.bsky.socialRansomware is going after managers: fake IT on Teams, then ClickFix in the Run box. https://intel.threadlinqs.com/threat/TL-2026-2897 #ThreatIntel #ClickFix #Ransomware #Teams
@threadlinqs.bsky.socialClickFix now hides its script in the browser cache as a fake PNG - the pasted command downloads nothing. https://intel.threadlinqs.com/threat/TL-2026-2858 #ThreatIntel #TrojanWin32 #Trojan #ClickFix
@masaomi346.bsky.socialCompromised Site -> #ClickFix
Malicious Domain:
vale-quaeum-a4hc9[.]top
amber-ridge-bruixsioi[.]pro
urlscan.io/search/#vale...
urlscan.io/search/#ambe...
#malware
@securityonline.bsky.socialDiscover how hackers disguised a ClickFix RAT as a custom ChatGPT bot to trick users into executing malicious commands and launching a remote access trojan.
@masaomi346.bsky.socialCompromised Site -> #ClickFix
Malicious Domain:
interseq[.]at
urlscan.io/search/#inte...
#malware
@thenewoil.org
