Story thread · 3 reports / 2 sources

Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures

thehackernews.com · 6dShare

A macOS ClickFix operation spanning more than 250 front-end domains now fingerprints visitors before deciding whether to show them a malware lure, a change Microsoft Threat Intelligence tracked on infrastructure it had been watching for weeks. The server-side gate hides the malicious page from crawlers and sandboxes while presenting selected Mac users with a fake software download. Microsoft

First report: New DOUBLECUP ClickFix service hides malware in browser cache images — bleepingcomputer.com, 8d