A new campaign uses ClickFix social engineering to spread DeepLoad, a stealthy malware loader that evades scans, steals credentials instantly, and bypasses blockers.—ReliaQuest https://thehackernews.com/2026/03/deepload-malware-uses-clickfix-and-wmi.html
DeepLoad Malware Uses ClickFix and WMI Persistence to Steal Browser Credentials

DeepLoad exploits ClickFix and WMI persistence to steal credentials, enabling stealth reinfection after three days.

The Hacker News