Australia warns of ClickFix attacks pushing Vidar Stealer malware

The Australian Cyber Security Center warns of an active campaign using ClickFix social engineering on compromised WordPress sites to trick users into running PowerShell commands that install the Vidar Stealer info‑stealer; the advisory describes Vidar’s data theft capabilities, its memory-resident and anti-forensic behavior, use of public dead‑drop C2s, observed targeting of Australian organizations, and provides IoCs and mitigation recommendations (restrict PowerShell, application allow-listing, update/remove WordPress plugins/themes).