ClickFix Attack Uses Compromised Websites and Polygon Blockchain to Deploy Banking Malware

A sophisticated ClickFix campaign has compromised at least 31 legitimate business websites to deliver a PowerShell backdoor that uses the Polygon blockchain to locate its command-and-control (C2) servers. Researchers found the operation had been active since at least November 2025. It combines fake CAPTCHA prompts, compromised websites, disposable... Weiterlesen