Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery
ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office. New research shows...
ClickFix
Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites
Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites Pierluigi Paganini May 25, 2026 Threat actors are...
FBI director Kash Patel’s brand website taken offline after malware reports
FBI director Kash Patel’s brand website taken offline after malware reports Pierluigi Paganini May 25, 2026 The merchandise website of...
A week in security (April 6 – April 12)
Last week on Malwarebytes Labs: Stay safe! We don’t just report on scams—we help detect them Cybersecurity risks should never...
![[un]prompted 2026 – Anatomy Of An Agentic Personal Al Infrastructure](https://securityboulevard.com/wp-content/uploads/2018/01/TwitterLogo-002.jpg)
ClickFix finds a new way to infect Macs
ClickFix campaigns are looking for alternatives now that many Mac users have been made aware of the dangers of pasting...
Apple Rolls Out Fix: New macOS Update Could Protect 100M Mac Users
Image: Joan Gamell/Unsplash Apple is stepping in to stop a mistake millions of users make every day: copying and pasting...
LeakNet Changes Tactics, But Consistency Gives Defenders an Advantage
Ransomware operator LeakNet is going large. Well, they’re scaling up, and at the same time, they’re changing tactics. Among...
DeepLoad Malware Uses ClickFix and WMI Persistence to Steal Browser Credentials
Ravie LakshmananMar 30, 2026Threat Intelligence / Browser Security A new campaign has leveraged the ClickFix social engineering tactic as a...
New macOS security feature will alert users about possible ClickFix attacks
Rumor has it that Apple deployed a new security feature in the fight against ClickFix. The new feature will...
New macOS Infinity Stealer uses Nuitka Python payload and ClickFix
New macOS Infinity Stealer uses Nuitka Python payload and ClickFix Pierluigi Paganini March 30, 2026 Infinity Stealer targets macOS via...
LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader
The ransomware operation known as LeakNet has adopted the ClickFix social engineering tactic delivered through compromised websites as an initial...
From Windows to macOS: ClickFix attacks shift tactics with ChatGPT-based lures
From Windows to macOS: ClickFix attacks shift tactics with ChatGPT-based lures Pierluigi Paganini March 17, 2026 ClickFix campaigns are evolving,...
Hacked sites deliver Vidar infostealer to Windows users
In recent years, ClickFix and fake CAPTCHA techniques have become a popular way for cybercriminals to distribute malware. Instead...
Hacked sites deliver Vidar infostealer to Windows users
In recent years, ClickFix and fake CAPTCHA techniques have become a popular way for cybercriminals to distribute malware. Instead...
ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool Installers
Three different ClickFix campaigns have been found to act as a delivery vector for the deployment of a macOS information...
