Security firm Report URI says its threat intelligence tools have identified 15,579 compromised websites, collectively receiving an estimated 135 million visits a month. The infections include credit card skimmers, ClickFix malware traps, device-exploitation code and malicious redirects, introduced either through direct site compromises like WordPress flaws or via infected third-party scripts loaded by the sites.
scotthelme.co.uk
· 2026-11-06
Google is rolling out new Chrome protections under Safe Browsing's Enhanced Protection mode that use a server-side Gemini model to flag deceptive websites and warn users about scam risk. The update also adds detection for ClickFix attacks, where users are tricked into pasting malicious commands into their terminal, and introduces a milder 'suspicious site' warning for pages that show scam-like patterns without meeting the threshold for a full red warning.
bleepingcomputer.com
· 2026-10-21
Google has updated Chrome to flag websites it deems 'suspicious,' not just those already confirmed as dangerous. The new alerts, powered partly by Gemini AI analysis of a site's content, branding and domain reputation, let users choose to leave the page, mark it safe, or continue browsing. The update also adds protections against fake antivirus update prompts and ClickFix-style social engineering attacks.
zdnet.com
· 2026-10-21
Huntress researchers found a custom ChatGPT variant named 'Plus 5.6', promoted via sponsored Google search results, that redirects users to a fake Google Sites page mimicking a Cloudflare check. That page instructs visitors to run a PowerShell command which installs a signed application alongside a malicious DLL, deploying a remote access trojan. Huntress says it has investigated at least 40 related incidents, and OpenAI plans to retire the custom GPTs feature on December 11.
bleepingcomputer.com
· 2026-09-29
Security researchers at Manifold Security found that third-party.com, a domain frequently used as a generic placeholder in developer documentation and code samples, now hosts a fake Cloudflare verification page. BleepingComputer confirmed the page mimics a 'Performing security verification' CAPTCHA that copies a malicious PowerShell command to a user's clipboard, then instructs them to paste and run it via Windows key + R, which downloads and executes malware from an external URL.
bleepingcomputer.com
· 2026-09-23
GoKawiil