Australia warns of ClickFix attacks pushing Vidar Stealer malware By Bill Toulas May 7, 2026 02:00 PM The Australian Cyber Security Center ACSC is warning organizations of an ongoing malware campaign using the ClickFix social engineering technique to distribute the Vidar Stealer info-stealing malwa… …
… The campaigns were attributed to the TeamPCP hacker group. In a previous report, OXsecurity says that threat actors quickly copied the malware source code and started modifying it to extend its capabilities. …
… Other campaigns abused shared ChatGPT and Grok conversations that conducted ClickFix attacks by impersonating software installation guides that instructed victims to execute commands that installed malware. …
… Download Now Related Articles: Popular node-ipc npm package compromised to steal credentials Shai Hulud attack ships signed malicious TanStack, Mistral npm packages New npm supply-chain attack self-spreads to steal auth tokens PyPI package with 1.1M monthly downloads hacked to push infostealer Hack… …
… The topics he writes about include malware, vulnerabilities, exploits and security defenses, as well as research and innovation in information security. His work has been published by Bitdefender, Netgear, The Security Ledger and Softpedia. …
… The new malware family was discovered by researchers at ecommerce security company Sansec, who found that the malicious code is loaded from a Google Tag Manager GTM container and executes on every page that loads it. …
… One interesting aspect of the new version of the malware is the introduction of malformed APK packaging to hinder automated analysis, and potentially also security tools. …
… Download Now Related Articles: Paid AI Accounts Are Now a Hot Underground Commodity Fake OpenAI repository on Hugging Face pushes infostealer malware New stealthy Quasar Linux malware targets software developers Threat actor uses Microsoft Teams to deploy new “Snow” malware WordPress plugin suite h… …
… Security researchers say the malware also established persistence on developer systems by modifying Claude Code hooks and VS Code auto-run tasks, enabling it to survive package removal. …
Red Hat npm packages compromised to steal developer credentials By Lawrence Abrams June 1, 2026 05:38 PM More than 30 npm packages under Red Hat's '@redhat-cloud-services' namespace were compromised in a supply-chain attack that distributed a new variant of the Shai-Hulud credential-stealing malwar… …
