Fake ChatGPT GPT Spreads RAT Malware
Huntress found attackers using custom GPTs and Google Sites to deliver a ClickFix RAT called @input, impacting dozens of users.
18 results for “clickfix”
Huntress found attackers using custom GPTs and Google Sites to deliver a ClickFix RAT called @input, impacting dozens of users.
Sekoia says the Exvicy framework reuses ErrTraffic's code and has been spotted delivering malware via compromised WordPress sites.
A hardcoded Cloudflare key let attackers rewrite Brevo's sites and customer scripts for hours, pushing ClickFix malware at scale.
Attackers used the verified HBO Max Reddit account to run 108 malicious ads in 48 hours, driving users to a fake download page.
ClickFix attacks have spread from exotic to mainstream, infecting Windows and macOS users via fake CAPTCHAs and terminal commands.
Hackers store ClickFix payloads in smart contracts, compromising over 5,400 small-business websites.
Threat actors are hijacking the trusted Node.js runtime to deliver malware, evading detection in targeted attacks since early 2026.
Microsoft warns of TerminalFix ClickFix variant that tricks users into running malicious PowerShell commands via fake Cloudflare checks.
CRPx0's victim count rose from under 10 to 48 organizations since June, but experts urge caution over unverified claims.
Attackers abuse npm mirrors to host HTML phishing pages, bypassing security filters by serving from legitimate domains.
Cato Networks found a campaign abusing Google Sites to spread macOS malware through ClickFix tactics.
New macOS infostealer AmnesiaStealer combines credential theft with silent remote browser control, researchers report.
Researchers have uncovered a new macOS infostealer that uses ClickFix social engineering and has stealthy remote browser control capabilities.
Huntress discovers macOS stealer via ClickFix, targeting crypto wallets and credentials.
A newly identified Go-based malware targets macOS users by leveraging social engineering to steal credentials and crypto assets.
Threat actors are exploiting technical support discussions on Steam to trick gamers into executing malicious PowerShell cryptominers.
Sandworm, Russia's notorious military intelligence unit, is now deploying the deceptive Clickfix CAPTCHA method to compromise targets.
A modular, C-based threat is weaponizing social engineering tactics to gain administrative control over compromised Windows systems.