Hackers Compromise Thousands of Sites for ClickFix and FakeUpdate Attacks

A cybercriminal group called DriveSurge has launched a large-scale malware distribution campaign by exploiting vulnerabilities in thousands of websites. The attacks rely on ClickFix and FakeUpdate methods, which deceive users into downloading and installing malicious software.

The ClickFix technique involves replacing legitimate website interface elements with fake buttons or links that lead to malicious downloads. FakeUpdate, meanwhile, disguises itself as browser or popular application updates, increasing the likelihood of a successful attack.

Cybersecurity experts emphasize that attackers are actively exploiting vulnerabilities in content management systems (CMS) and plugins, allowing them to gain control over websites. As a result, victims may face data breaches, device infections, or loss of access to critical resources.

Experts recommend that website owners regularly update software, implement multi-factor authentication, and conduct security audits to minimize the risk of compromise.