SecuritySep 17, 2026
Brevo supply-chain attack injects ClickFix scripts on customer sites
The Brevo supply-chain attack leveraged a compromised Cloudflare API key to inject ClickFix scripts into thousands of WordPress sites.
Wordpress
2 reports filed under this subject.
SecuritySep 5, 2026
Blockchain Malware Campaign Hijacks Over 5,400 Sites to Serve ClickFix Payloads
A blockchain malware campaign uses more than 5,400 compromised WordPress and PrestaShop sites to deliver ClickFix lures via BNB Smart Chain testnet contracts.