Skip to content

Malware

IClickFix

IClickFix is a malicious JavaScript framework deployed on compromised WordPress sites to deliver further malware using the ClickFix social engineering tactic and fake Cloudflare Turnstile CAPTCHA chal

IClickFix is a JavaScript malware family.

Background

IClickFix is a malicious JavaScript framework planted on hijacked WordPress sites to push additional malware, relying on the ClickFix social-engineering technique together with a counterfeit Cloudflare Turnstile CAPTCHA challenge.


Source: Malpedia (Fraunhofer FKIE).