Microsoft observed ClickFix attacks using browser cache smuggling to execute cached VBScript and launch a credential-targeting malware chain.

A ClickFix campaign has been observed hiding a VBScript payload in the browser cache, disguised as an image, so the script was already on the device when the victim was tricked into running a command ...

ClickFix attacks fake CAPTCHA pages to trick users into running malicious commands, delivering malware through compromised websites.

That old Java icon had a much bigger résumé than I gave it credit for.

Ukraine’s Computer Emergency Response Team, discovered more than 100 compromised websites in September 2026 distributing LUNEXSTEALER ...

CERT-UA found 100+ compromised sites using ClickFix lures to distribute LunexStealer to Windows search visitors.

Over 100 hacked Ukrainian websites used fake Cloudflare checks to install Lunex Stealer and steal browser passwords, tokens ...

When writing sample code or configuration examples, I'm sure you've used 'your-domain.com' or 'yoursite.com' for the URL part ...

Browser AI agent security research: security researcher Gal Weizman of Forever Security demonstrated that one ordinary browser extension can hijack AI agents in Chrome, Edge, Perplexity Comet, Opera ...

Unraveling work troubles, one by one. A developer asked, 'Do you have the source code?', but all I have on hand is an EXE file that can be launched. If something works, it seems like it could be fixed ...

This is the visibility gap in modern phishing detection. Knowing where a link leads is only the starting point, as analysts also need to understand what unfolds after the page loads. The challenge is ...