TLDR Tech / InfoSec
Gizmodo readers hit with ClickFix malware prompts after account compromise
Gizmodo's site briefly served fake CAPTCHA pop-ups that triggered ClickFix malware scripts after a compromised account injected malicious code. Windows visitors risked installing NetSupport RAT for remote access and data theft, while the macOS payload was misconfigured and stalled at a ZIP password prompt. Gizmodo removed the script, took the site down, and secured the abused account.
Read the full story