Australia Warns of ClickFix Attacks Delivering Vidar Malware (infosecurity-magazine.com)

• ACSC warns of ClickFix campaign targeting organizations
• Campaign delivers Vidar infostealer malware
• Mitigation includes blocking PowerShell and user awareness

"The Australian Cyber Security Centre (ACSC) has issued an urgent alert concerning a widespread cyber campaign targeting organizations. The attackers employ a technique called ClickFix, which tricks users into clicking on fake error messages that initiate the download of Vidar, a sophisticated infostealer malware. Vidar targets sensitive information including passwords, browser history, and cryptocurrency wallets. The ACSC recommends that organizations implement multi-factor authentication, monitor for suspicious activities, and ensure software updates are current. This campaign highlights the growing risk of social engineering combined with malware delivery."