ClickFix campaign hijacks 100+ Ukrainian websites to spread Lunex stealer
CERT-UA says a ClickFix campaign tracked as UAC-0277 compromised more than 100 Ukrainian websites to push Lunex, a stealer sold as malware-as-a-service.
#ClickFix
Cybersecurity news about “ClickFix”.
ClickFix now hides its payload in the browser cache to slip past download defenses
Microsoft Threat Intelligence says fake CAPTCHA pages now pre-load a script into the browser cache disguised as a PNG, sidestepping both download monitoring and the Windows Run dialog's character limit.