Scammers are going after young Roblox players and their Robux

Scammers are using fake Roblox login pages and free Robux offers to steal account credentials from young players.

Brevo supply-chain attack injected ClickFix scripts on customer sites

Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites to distribute malware.
cyberpress

UAC-0277 Hackers Compromise 100+ Websites to Spread LUNEXSTEALER via ClickFix Attacks

Ukraine’s Computer Emergency Response Team, discovered more than 100 compromised websites in September 2026 distributing LUNEXSTEALER ...
Security Affairs

CERT-UA: Fake Cloudflare Checks Deliver LunexStealer Malware

Over 100 hacked websites used fake Cloudflare checks to trick visitors into installing LunexStealer through ClickFix commands.
BleepingComputer

Placeholder domain used in dev docs now serves ClickFix attacks

The "third-party.com" domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloudflare verification page that attempts to trick Windows users into ...