Australian Cyber Security Centre Issues Alert Over ClickFix Attacks

The Australian Cyber Security Centre (ACSC) warns of a widespread campaign distributing the Vidar Stealer infostealer by using compromised WordPress sites and the ClickFix social-engineering technique (fake CAPTCHA prompts) to trick Windows users into executing malicious commands. Vidar steals credentials, payment data, crypto wallets and MFA tokens, uses in-memory persistence and self-deletion to evade detection, and the alert includes mitigation advice such as restricting unapproved execution, patching software, limiting clipboard writes, and enforcing phishing-resistant MFA.