CYBERSECURITYTRACKER
Permanent story citation

Amazon-Themed ClickFix Campaign Serves Up Finger-Licking Malware

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10797

As cited

Copy frozen at (site build).

threat intel

Amazon-Themed ClickFix Campaign Serves Up Finger-Licking Malware

A ClickFix campaign masquerading as an Amazon business search result deployed Lumma Stealer and NetSupport Client remote access software onto compromised machines. The attack chain targeted users seeking legitimate Amazon business information through poisoned search results.

Why it matters: Organizations and employees are at risk when conducting routine web searches; threat actors are using search result poisoning and fake error prompts to deliver information stealers and remote access malware that enable credential theft and lateral movement.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Amazon-Themed ClickFix Campaign Serves Up Finger-Licking Malware

A ClickFix campaign masquerading as an Amazon business search result deployed Lumma Stealer and NetSupport Client remote access software onto compromised machines. The attack chain targeted users seeking legitimate Amazon business information through poisoned search results.

Why it matters: Organizations and employees are at risk when conducting routine web searches; threat actors are using search result poisoning and fake error prompts to deliver information stealers and remote access malware that enable credential theft and lateral movement.

VendorsGoogleMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary