A week in security (April 6 – April 12)
Last week on Malwarebytes Labs: Stay safe! We don’t just report on scams—we help detect them Cybersecurity risks should never...
ClickFix
![[un]prompted 2026 – Anatomy Of An Agentic Personal Al Infrastructure](https://securityboulevard.com/wp-content/uploads/2018/01/TwitterLogo-002.jpg)
ClickFix finds a new way to infect Macs
ClickFix campaigns are looking for alternatives now that many Mac users have been made aware of the dangers of pasting...
Apple Rolls Out Fix: New macOS Update Could Protect 100M Mac Users
Image: Joan Gamell/Unsplash Apple is stepping in to stop a mistake millions of users make every day: copying and pasting...
LeakNet Changes Tactics, But Consistency Gives Defenders an Advantage
Ransomware operator LeakNet is going large. Well, they’re scaling up, and at the same time, they’re changing tactics. Among...
DeepLoad Malware Uses ClickFix and WMI Persistence to Steal Browser Credentials
Ravie LakshmananMar 30, 2026Threat Intelligence / Browser Security A new campaign has leveraged the ClickFix social engineering tactic as a...
New macOS security feature will alert users about possible ClickFix attacks
Rumor has it that Apple deployed a new security feature in the fight against ClickFix. The new feature will...
New macOS Infinity Stealer uses Nuitka Python payload and ClickFix
New macOS Infinity Stealer uses Nuitka Python payload and ClickFix Pierluigi Paganini March 30, 2026 Infinity Stealer targets macOS via...
LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader
The ransomware operation known as LeakNet has adopted the ClickFix social engineering tactic delivered through compromised websites as an initial...
From Windows to macOS: ClickFix attacks shift tactics with ChatGPT-based lures
From Windows to macOS: ClickFix attacks shift tactics with ChatGPT-based lures Pierluigi Paganini March 17, 2026 ClickFix campaigns are evolving,...
Hacked sites deliver Vidar infostealer to Windows users
In recent years, ClickFix and fake CAPTCHA techniques have become a popular way for cybercriminals to distribute malware. Instead...
Hacked sites deliver Vidar infostealer to Windows users
In recent years, ClickFix and fake CAPTCHA techniques have become a popular way for cybercriminals to distribute malware. Instead...
ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool Installers
Three different ClickFix campaigns have been found to act as a delivery vector for the deployment of a macOS information...
Evil evolution: ClickFix and macOS infostealers
This campaign – use of a popular and up-to-date lure notwithstanding – has all the hallmarks of a ‘classic’ ClickFix...
Microsoft warns of ClickFix campaign exploiting Windows Terminal to deliver Lumma Stealer
Microsoft warns of ClickFix campaign exploiting Windows Terminal to deliver Lumma Stealer Pierluigi Paganini March 06, 2026 Microsoft warns of...
Chrome Extension Hijacked to Deliver Malware, Steal Crypto Wallets
Image: madedee/Adobe A once-trusted Chrome extension with thousands of users was quietly transformed into a malware delivery vehicle, exposing how...
