ClickFix attacks fake CAPTCHA pages to trick users into running malicious commands, delivering malware through compromised websites.

IntroductionIn July 2026, Zscaler ThreatLabz uncovered a campaign linked to TraderTraitor (also tracked as Jade Sleet, UNC4899, Pressure Chollima, and Slow Pisces), an advanced persistent threat actor ...

Seven internet domains that carried a vulnerability scanner and a spear-phishing kit were redirected to FBI-controlled name ...

ClickFix Fake CAPTCHA Attack Tricks Users A new ClickFix fake CAPTCHA attack is turning routine web safety checks into a route for malware. Visitors to compromised websites are shown fake CAPTCHA or ...

CastleStealer upgrades target Windows users, bypassing browser encryption, executing remote commands and stealing sensitive ...

Integrity Technology Group hacking exposed: seven nations named the sanctioned Beijing cybersecurity firm that built a custom ...

ClickFix attacks now hide payloads using DNS TXT records and browser cache pre-fetching, making it tougher to spot early ...

The FBI has warned that Chinese government-linked hackers are combining automated vulnerability scanning, large-scale botnets ...

U.S. authorities seized seven domains used by China-linked Flax Typhoon to scan networks and support intrusions into critical ...

A ClickFix campaign has been observed hiding a VBScript payload in the browser cache, disguised as an image, so the script was already on the device when the victim was tricked into running a command ...

AI agents that run code can leak secrets, install malware, and wipe your repo. Learn the 5 hidden security risks and how to ...