Compromised Ukrainian Sites Distribute Fake Cloudflare Verification Pages to Deploy Info-Stealing Malware

An ongoing ClickFix campaign has compromised legitimate Ukrainian business websites to inject fake Cloudflare verification pages. Attackers deceive…

Check if your employees access Ukrainian websites; educate staff on ClickFix and fake Cloudflare verification pages. Implement restrictions on PowerShell/cmd execution without validation. Monitor suspicious installer downloads and clipboard changes.