Threat Actors Hijacking Websites To Deliver .NET-Based Malware

Clearlake (ClearFake) is an active campaign that compromises legitimate websites to distribute .NET-based fake antivirus and other malware, using public code-hosting services (GitHub, Bitbucket) and URL shorteners to mask payloads; the report includes IoCs (infected site, payload URL, smart contract, repository links) and cautions users about fake update prompts and the misuse of legitimate online resources.