ClickFix

5 posts

Siemens Software Center Ran Attackers' Code With a Valid Siemens Signature on PCs That Never Installed It

October 20, 2026

Canon, then Stardock, now Siemens. Attackers keep running their code behind a trusted signature. On October 19 Siemens confirmed its own signed program was the …

/clickfix-cache-smuggling-fake-captcha/clickfix-cache-smuggling-fake-captcha.png

ClickFix Fake CAPTCHA Hides Malware in Your Browser Cache Before You Run a Single Command

October 3, 2026

A CAPTCHA on hacked websites now hides the malware in the browser cache as an image before it asks for anything. When the pasted command runs, nothing gets …

/ghost-cms-cve-2026-26980/featured-image.png

Ghost CMS SQL Injection Stole Admin Keys From 700 Websites With One Request

May 26, 2026

A SQL injection vulnerability in Ghost CMS has turned Harvard University, Oxford University, and DuckDuckGo into malware distribution platforms. Visitors arrive …

/reaper-shub-macos-stealer/featured-image.png

Reaper Bypasses Apple Security to Steal macOS Passwords and Hijack Crypto Wallets

May 19, 2026

Reaper swipes macOS passwords and crypto wallets, backdoors the machine, and pretends to be Apple, Microsoft, and Google in the same attack. Apple shipped an …

/macsync-clickfix-claude/featured-image.png

MacSync Malware Spreads Through Claude.ai and Replaces Your Crypto Wallet Apps

May 12, 2026

MacSync is spreading through Google ads that lead directly to claude.ai. The installation guide there was written by Claude itself. One Terminal command and the …