New ClickFix attack abuses nslookup to retrieve PowerShell payload via DNS

Threat actors are now abusing DNS queries as part of ClickFix social engineering attacks to deliver malware, making this the first known use of DNS as a channel in these campaigns.

Pastebin comments push ClickFix JavaScript attack to hijack crypto swaps

Threat actors are abusing Pastebin comments to distribute a new ClickFix-style attack that tricks cryptocurrency users into ...
IEEE

Analyzing XSS Attack Information Content on Social Media

Abstract: Social media has become more than just a communication tool; it's now a rapidly evolving platform for sharing information, including cybersecurity threats like XSS attacks. This study ...