CyberheistNews Vol 16 #29 ClickFix Social Engineering is Now the Leading Malware Delivery Method

This CyberheistNews edition reports that ClickFix social engineering has become the leading malware delivery method—now expanded to macOS and used to install infostealers—while attackers increasingly leverage AI to scale convincing lures; new phishing toolkits (Jalisco and OmegaLord) are actively bypassing MFA and harvesting credentials and phone numbers, and ransomware actor Qilin continues mass extortion by exploiting unpatched edge devices. The newsletter emphasizes shifting defenses toward identity-aware email security, continuous user training, and monitoring for these evolving TTPs.