ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

threat-intel

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

A new ClickFix attack leverages compromised websites to smuggle malicious payloads through a browser cache, bypassing character limits and security controls. This tactic has been increasingly utilized by threat actors, i…

The Hacker News · 4d ago HighCVSS 7.5ExploitedEPSS 2%

CVE-2026-6854 CA FR UK clickfix browser cache prompt injection

malware

MATCHBOIL: New tricks, same old evil intentions

ESET researchers have been tracking the evolution of MATCHBOIL, a C# downloader used by the Russia-aligned UAC-0099 APT group since at least 2024. Initially using unprintable Unicode characters for obfuscation and custom…

WeLiveSecurity · 2d ago Medium

RU csharp downloader obfuscation

malware

Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift

Russian cyber-espionage group UAC-0099, likely linked to Russian interests, has been steadily refining its MatchBoil malware downloader since 2024. The group is believed to be an initial access broker for Sandworm.

Dark Reading · 1d ago Medium

RU malware cyber-espionage threat-intel

news.mlab.sh

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits