ClickFix malware: Silent Push tracks 2,000+ domains and IPs affected by WordPress fake browser update infostealers. - Silent Push
Tags
country: Russia
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Social Media - T1593.001
Show in Graph
Common Information
Type Value
UUID 1b1957ec-968a-444e-a41b-8e783a2e527d
Fingerprint a530c982861df059
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 30, 2024, 3:50 p.m.
Added to db Oct. 30, 2024, 5:02 p.m.
Last updated Nov. 17, 2024, 8:43 p.m.
Headline ClickFix malware: Silent Push tracks 2,000+ domains and IPs affected by WordPress fake browser update infostealers.
Title ClickFix malware: Silent Push tracks 2,000+ domains and IPs affected by WordPress fake browser update infostealers. - Silent Push
Detected Hints/Tags/Attributes 38/2/16
Source URLs
Redirection Url
Details Source https://www.silentpush.com/blog/clickfix/?utm_source=rss&utm_medium=rss&utm_campaign=clickfix
URL Provider
Details Provider Source level domain
Details silentpush.com www.silentpush.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 496 ✔ Silent Push https://www.silentpush.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 5 
abc-script.js
Details File 5 
aum-script.js
Details File 5 
awm-script.js
Details File 5 
cb-script.js
Details File 5 
cci-script.js
Details File 5 
cfg-script.js
Details File 5 
cls-script.js
Details File 5 
dsm-script.js
Details File 62 
script.js
Details File 5 
fbp-script.js
Details File 5 
qcc-script.js
Details File 5 
rmb-script.js
Details File 5 
sop-script.js
Details File 5 
spe-script.js
Details File 5 
smi-script.js
Details File 1 
body_analysis.js