Tuesday 22 September 2026 02:43:14 GMT+02:00
Netcrook
#ClickFix CAPTCHA
WordPress Front Doors Turned Into a Malware Relay
A campaign tied to compromised WordPress sites is being used to push deceptive CAPTCHA prompts and a mix of ransomware, credential theft, file theft, and remote monitoring claims.
Fake CAPTCHAs, Real Intrusion: The ClickFix Lure Behind a Ukraine-Focused Malware Push
A reported CERT-UA attribution points to a state-linked cluster using verification-themed deception to make victims run the first step of their own compromise.