ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer

Reported by Security Affairs (Pierluigi Paganini)

Summary by Cyber Security News25 Sep 2026, 15:49 CEST

About this summary. This is a short, independently written summary of an article first published by Security Affairs. Cyber Security News did not report or verify the underlying story. Read the original: https://securityaffairs.com/199731/malware/clickfix-campaign-abuses-trusted-websites-to-deploy-psychedelic-stealer.html

Attackers hijacked Ukrainian websites to deliver a fake Cloudflare CAPTCHA that installs Psychedelic Stealer and steals browser and crypto credentials. Psychedelic Stealer is being distributed through compromised Ukrainian business websites. Attackers injected hidden iframes into legitimate pages and used them to display a fake Cloudflare verification screen to visitors.

Read the full article at Security Affairs →