Clickfix
3 posts

Ghost CMS SQL Injection Stole Admin Keys From 700 Websites With One Request
A SQL injection vulnerability in Ghost CMS has turned Harvard University, Oxford University, and DuckDuckGo into malware distribution platforms. Visitors arrive …

Reaper Bypasses Apple Security to Steal macOS Passwords and Hijack Crypto Wallets
Reaper swipes macOS passwords and crypto wallets, backdoors the machine, and pretends to be Apple, Microsoft, and Google in the same attack. Apple shipped an …

MacSync Malware Spreads Through Claude.ai and Replaces Your Crypto Wallet Apps
MacSync is spreading through Google ads that lead directly to claude.ai. The installation guide there was written by Claude itself. One Terminal command and the …