Infostealers Enable Attackers to Hijack Legitimate Business Infrastructure for Malware Hosting

**Hudson Rock research describes a ‘ClickFix’ social-engineering campaign that leverages stolen administrator credentials harvested by infostealers to convert legitimate business websites into malware distribution platforms, creating a self-sustaining feedback loop; analysis of 1,600 tracked domains found ~220 with exposed admin credentials, and attackers use fake captcha clipboard-injection and PowerShell to deploy infostealers such as Lumma, Vidar, and Stealc.**