ClearFake Deploys Crypto Stealer That Uses Vulnerable Driver to Kill EDR Security Tools
Wed Sep 09 2026
Cryptocurrency
Detection & Response
Malware
Vulnerability
cybersecuritynews.com
ClearFake has expanded a fake CAPTCHA scam into a chain that steals cryptocurrency and credentials while disabling endpoint protection. It turns compromised websites into launchpads, relying on visitors to run a command that appears routine. The operation begins with injected browser code, blockchain-hosted instructions, and a ClickFix prompt styled as a Google CAPTCHA. After a […]
The post ClearFake Deploys Crypto Stealer That Uses Vulnerable Driver to Kill EDR Security Tools appeared first on Cyber Security News.