ClickFix via compromised WordPress sites distributing Vidar Stealer

ASD's ACSC has observed ClickFix social-engineering activity using compromised WordPress sites to distribute Vidar Stealer against Australian infrastructure. Treat unexpected 'paste this command' prompts as hostile. This is social engineering, not an AI-stack flaw.

Exploited in Australia?

yes

Primary: ASD's ACSC advisory

australia social engineering