{"id":5378,"date":"2025-08-08T01:32:54","date_gmt":"2025-08-08T01:32:54","guid":{"rendered":"https:\/\/techtrendfeed.com\/?p=5378"},"modified":"2025-08-08T01:32:55","modified_gmt":"2025-08-08T01:32:55","slug":"clickfix-infostealer-disruptions-and-ransomware-deathmatch","status":"publish","type":"post","link":"https:\/\/techtrendfeed.com\/?p=5378","title":{"rendered":"ClickFix, infostealer disruptions, and ransomware deathmatch"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p class=\"sub-title\">Risk actors are embracing ClickFix, ransomware gangs are turning on one another \u2013 toppling even the leaders \u2013 and regulation enforcement is disrupting one infostealer after one other<\/p>\n<div class=\"article-authors d-flex flex-wrap\">\n<div class=\"article-author d-flex\"><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.welivesecurity.com\/en\/our-experts\/eset-research\/\" title=\"ESET Research\"><picture><source srcset=\"https:\/\/web-assets.esetstatic.com\/tn\/-x45\/wls\/2022\/03\/twitter_profile_picture_400x400.png\" media=\"(max-width: 768px)\"\/><img decoding=\"async\" class=\"author-image me-3\" src=\"https:\/\/web-assets.esetstatic.com\/tn\/-x45\/wls\/2022\/03\/twitter_profile_picture_400x400.png\" alt=\"ESET Research\"\/><\/picture><\/a><\/div>\n<\/div>\n<p class=\"article-info mb-5\">\n        <span>05 Aug 2025<\/span><br \/>\n        <span class=\"d-none d-lg-inline\">\u00a0\u2022\u00a0<\/span><br \/>\n        <span class=\"d-inline d-lg-none\">, <\/span><br \/>\n        <span>1 min. learn<\/span>\n    <\/p>\n<div class=\"hero-image-container\">\n        <picture><source srcset=\"https:\/\/web-assets.esetstatic.com\/tn\/-x266\/wls\/2025\/08-25\/eset-research-podcast-eset-threat-report-h1-2025.jpeg\" media=\"(max-width: 768px)\"\/><source srcset=\"https:\/\/web-assets.esetstatic.com\/tn\/-x425\/wls\/2025\/08-25\/eset-research-podcast-eset-threat-report-h1-2025.jpeg\" media=\"(max-width: 1120px)\"\/><img decoding=\"async\" class=\"hero-image\" src=\"https:\/\/web-assets.esetstatic.com\/tn\/-x700\/wls\/2025\/08-25\/eset-research-podcast-eset-threat-report-h1-2025.jpeg\" alt=\"ESET Threat Report H1 2025: ClickFix, infostealer disruptions, and ransomware deathmatch\"\/><\/picture>    <\/div>\n<\/div>\n<div>\n<p>\u201cIt\u2019s all enjoyable and video games till somebody will get harm\u201d may properly be the title of the newest ESET Risk Report, as cybercriminals play new thoughts video games with their victims, wage full-on deathmatches amongst themselves, and develop into the hunted recreation of regulation enforcement and personal distributors.<\/p>\n<p>ESET Distinguished Researcher <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.welivesecurity.com\/en\/our-experts\/aryeh-goretsky\/\" target=\"_blank\" rel=\"noopener\">Aryeh Goretsky<\/a> and Safety Consciousness Specialist <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.welivesecurity.com\/en\/our-experts\/ondrej-kubovic\/\" target=\"_blank\" rel=\"noopener\">Ondrej Kubovi\u010d<\/a> open this installment of the ESET Analysis Podcast by breaking down the newest cry amongst risk actors: ClickFix. They clarify how this system went from non-existent a 12 months in the past to the second most prevalent risk right now, and why it\u2019s so efficient. Additionally they study a particular instance of this social engineering tactic FakeCaptcha, abusing the well-known human verification mechanism and weaponing it trick victims into executing malicious instructions.<\/p>\n<p>Shifting from rising threats to constructive developments, the second phase highlights latest regulation enforcement disruptions of infostealers. Noteworthy circumstances from final 12 months embody takedown of Redline\/Meta Stealer in late 2024 and up to date operations towards <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.welivesecurity.com\/en\/eset-research\/eset-takes-part-global-operation-disrupt-lumma-stealer\/\" target=\"_blank\" rel=\"noopener\">LummaStealer <\/a>and <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.welivesecurity.com\/en\/eset-research\/danabot-analyzing-fallen-empire\/\" target=\"_blank\" rel=\"noopener\">Danabot<\/a>. Aryeh and Ondrej focus on what made these infostealer-as-a-service ventures enticing to associates, the influence of the disruptions, and ESET analysis\u2019s particular contributions to those takedowns.<\/p>\n<p>The ultimate part covers the latest \u201cdeathmatch\u201d-style infighting within the ransomware scene, that includes the minor participant Dragonforce. Regardless of their missing repute and low sufferer depend, Dragonforce\u2019s operators went on a brazen offensive, defacing the info leak websites (DLS) of a number of rival teams on the darkish net \u2013 together with Mamona and BlackLock \u2013 and finally taking down additionally the DLS of the then-leader, RansomHub.<\/p>\n<p>If ransomware, infostelaers or new social engineering methods are your factor, tune in and subscribe to the ESET Analysis Podcast. For a extra detailed model, obtain the <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.welivesecurity.com\/en\/eset-research\/eset-threat-report-h1-2025\/\" target=\"_blank\" rel=\"noopener\">ESET Risk Report H1 2025<\/a> from the <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.welivesecurity.com\/en\/threat-reports\/\">Risk Stories part<\/a> \u2013 no paywall or registration required.<\/p>\n<blockquote>\n<p><em>Mentioned:<\/em><\/p>\n<ul>\n<li><em>ClickFix and FakeCaptcha 1:05<\/em><\/li>\n<li><em>Whack-a-hack, infostealer model 9:20<\/em><\/li>\n<li><em>Ransomware deathmatch 18:40<\/em><\/li>\n<\/ul>\n<\/blockquote>\n<p><iframe style=\"border: none; min-width: min(100%, 430px); height: 150px;\" title=\"Threat Report H1 2025: ClickFix, disruptions, and ransomware deathmatch\" src=\"https:\/\/www.podbean.com\/player-v2\/?i=t3ciy-191c9bc-pb&amp;from=pb6admin&amp;share=1&amp;download=1&amp;rtl=0&amp;fonts=Arial&amp;skin=f6f6f6&amp;font-color=auto&amp;logo_link=episode_page&amp;btn-skin=0096a1\" width=\"100%\" height=\"150\" scrolling=\"no\" loading=\"lazy\" data-name=\"pb-iframe-player\"><\/iframe><\/p>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>Risk actors are embracing ClickFix, ransomware gangs are turning on one another \u2013 toppling even the leaders \u2013 and regulation enforcement is disrupting one infostealer after one other 05 Aug 2025 \u00a0\u2022\u00a0 , 1 min. learn \u201cIt\u2019s all enjoyable and video games till somebody will get harm\u201d may properly be the title of the newest [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":5380,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58],"tags":[3639,4552,4551,3108,500],"class_list":["post-5378","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-clickfix","tag-deathmatch","tag-disruptions","tag-infostealer","tag-ransomware"],"_links":{"self":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/5378","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5378"}],"version-history":[{"count":1,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/5378\/revisions"}],"predecessor-version":[{"id":5379,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/5378\/revisions\/5379"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/media\/5380"}],"wp:attachment":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5378"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5378"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5378"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}<!-- This website is optimized by Airlift. Learn more: https://airlift.net. Template:. Learn more: https://airlift.net. Template: 69d9690a190636c2e0989534. Config Timestamp: 2026-04-10 21:18:02 UTC, Cached Timestamp: 2026-07-29 15:12:57 UTC -->