Clickfix
4 posts

ClickFix Fake CAPTCHA Hides Malware in Your Browser Cache Before You Run a Single Command
A CAPTCHA on hacked websites now hides the malware in the browser cache as an image before it asks for anything. When the pasted command runs, nothing gets …

Ghost CMS SQL Injection Stole Admin Keys From 700 Websites With One Request
A SQL injection vulnerability in Ghost CMS has turned Harvard University, Oxford University, and DuckDuckGo into malware distribution platforms. Visitors arrive …

Reaper Bypasses Apple Security to Steal macOS Passwords and Hijack Crypto Wallets
Reaper swipes macOS passwords and crypto wallets, backdoors the machine, and pretends to be Apple, Microsoft, and Google in the same attack. Apple shipped an …

MacSync Malware Spreads Through Claude.ai and Replaces Your Crypto Wallet Apps
MacSync is spreading through Google ads that lead directly to claude.ai. The installation guide there was written by Claude itself. One Terminal command and the …