> TritonInfoSec News
Home / Oct 07, 2026 / Story
0
#8 The Hacker News general October 06, 2026 at 05:22 UTC

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

By [email protected] (The Hacker News)

AI Summary

Microsoft Threat Intelligence documented a new ClickFix variant that pre-fetches malicious JavaScript payloads into the browser cache disguised as PNG files on compromised websites, bypassing Windows execution warnings that typically appear when running remotely-fetched scripts. A related campaign tracked by CERT-UA compromised over 100 Ukrainian websites to deliver the Lunex infostealer via fake Cloudflare verification pages using this technique.

Read full article → https://thehackernews.com/2026/10/clickfix-smuggle…

Relevance score: 84.0/100

# More from October 07

  1. 1
    Hackers obtain counterfeit TLS certificates for Google and other large services Ars Technica Security
  2. 2
    Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier SecurityWeek
  3. 3
    Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products The Hacker News
  4. 4
    8.8 Million Impacted by Data Breach at Denmark’s Central Person Register SecurityWeek
  5. 5
    Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks CyberScoop
  6. 6
    Hackers exploit 32 zero-days on first day of Pwn2Own Ireland BleepingComputer
  7. 7
    FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach The Hacker News
  8. 9
    Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System SecurityWeek
  9. 10
    FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware SecurityWeek