Description
ClearFake is a malware distribution campaign that injects scripts into compromised websites and shows visitors fake browser update prompts to trick them into downloading malicious payloads. The campaign chains have evolved through many variants that borrow techniques such as fake CAPTCHA and clipboard based instructions, and they primarily deliver information stealers. Because the lures imitate routine software maintenance, they frequently fool technical users as well as novices.
Stats
- First seen
- December 2023
- Last seen
- September 2026
Also known as
Clearfake
Alert name variants
| Alert Name |
|---|
| Document-HTML.Dropper.ClearFake |
| Document-HTML.Malware.ClearFake |
| Document-HTML.Trojan.Clearfake |
| Document-HTML.Trojan.ClearFake |
| Script-JS.Trojan.Clearfake |
| Script-JS.Trojan.ClearFake |
| Shortcut.Dropper.ClearFake |
| Win32.Trojan.ClearFake |
| Win64.Trojan.Clearfake |
| Win64.Trojan.ClearFake |