ClickFix

Description

ClickFix, also known as ClearFake, is a fake browser update malware that is distributed through malicious WordPress plugins. These plugins inject JavaScript into websites, which then displays fake browser update prompts to visitors. The malware leverages social engineering to trick users into downloading and executing malicious payloads, such as remote access trojans and information stealers like Vidar and Lumma. ClickFix has been observed in the wild since 2023 and is often spread through compromised websites with stolen administrator credentials.