Back to all news
Security

Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer

The Hacker News·September 24, 2026·1 min read
Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer

An active ClickFix campaign is compromising legitimate Ukrainian business websites to inject fake Cloudflare verification pages, tricking visitors into downloading a new information stealer called Psychedelic. The lure copies a Windows Installer command to the clipboard and instructs victims to paste it into a run dialog, executing the malware.

Read at The Hacker News
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store