security Source: The Hacker News
๐Ÿ“… 24 September 2026 at 10:30 PM UTC

Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer

Verified Primary Feed Ingestion
โšก Executive Takeaways & Intelligence Summary
An active ClickFix campaign has been observed compromising legitimate Ukrainian business websites to inject bogus Cloudflare verification pages and trick victims into downloading a previously undocumented information stealer called Psychedelic. "When a visitor interacts with the page, the lure copies a Windows Installer command to the clipboard and instructs the visitor to paste it into the

๐Ÿ“ฐ Related Surveillance Disclosures