#payloads


ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

Oct 6, 2026 // 12:48

A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web browser’s cache. “Instead […]

MacSync malware uses public iCloud calendars to deliver new payloads

Sep 24, 2026 // 23:57

A new variant of the MacSync info-stealing malware targeting macOS systems now uses public iCloud calendar events to deliver fresh payloads. MacSync is a Swift-based […]

Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

Sep 5, 2026 // 17:36

A massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads stored in smart contracts on the BNB Smart Chain (BSC). […]

Authorities Turn Sality’s P2P Network Against Itself, Cutting Off New Malware Payloads

Sep 2, 2026 // 11:35

The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-peer (P2P) botnet known as Sality as part of a coordinated […]

New OkoBot framework deploys 20 payloads to steal data, crypto

Jul 16, 2026 // 22:57

A new malicious framework called OkoBot is delivering more than 20 payloads in attacks focused on stealing cryptocurrency wallet seed phrases, credentials, and other sensitive data. […]

Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery

Jul 2, 2026 // 02:07

ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office. New research shows the malicious commands behind its […]

Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery

Jul 1, 2026 // 14:27

ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office. New research shows the malicious commands behind its […]

Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery

Jul 1, 2026 // 14:17

ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office. New research shows the malicious commands behind its […]

WordPress malware campaign hides payloads in Steam profiles

Jun 1, 2026 // 20:17

Nearly 2,000 WordPress websites were infected with malware that relies on Steam Community profile comments to hide command-and-control (C2) data. The threat actor used invisible […]

BTMOB Android malware service generates custom phishing payloads

May 29, 2026 // 00:16

An Android remote access trojan named BTMOB is offered to cybercriminals with a builder interface for generating malware payloads tailored to phishing lures. The malware […]