Breaches

Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer

September 24, 2026 1 min read 5 views
cybersecurity threats news
An active ClickFix campaign has been observed compromising legitimate Ukrainian business websites to inject bogus Cloudflare verification pages and trick victims into downloading a previously undocumented information stealer called Psychedelic. "When a visitor interacts with the page, the lure copies a Windows Installer command to the clipboard and instructs the visitor to paste it into the

Was this article helpful?

0 found this helpful

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.