Google Adds Chrome Protection Against ClickFix
Chrome in Enhanced Protection mode can detect the copying of suspicious commands used in ClickFix attacks and display a warning after analysis through Safe Browsing.
Tag ClickFix
OVHcloud CLI Had Compromised Release Archives; Users Should Rotate Secrets
An attacker replaced archives for older OVHcloud CLI releases on GitHub. Affected users should switch to v0.16.0 and change credentials stored locally.
Brevo Confirms Supply-Chain Attack via Cloudflare Worker, Scripts Spread ClickFix Malware
A compromised Cloudflare API key allowed an attacker to inject malicious code into Brevo pages and embedded scripts used on customer websites. The incident lasted approximately 5.5 hours.
Compromised HBO Max ad account spread ClickFix malware on Reddit
Attackers abused an HBO Max account authorized to publish ads on Reddit. The malicious campaigns prompted users to run a malware-laden command themselves on Windows or macOS.