CERT24ClickFix scam helps spread Cruciferra malwareLoading data…
CERT24Threat Observatory
Period

ClickFix scam helps spread Cruciferra malware

eSentire’s Threat Response Unit described ErrTraffic-generated ClickFix campaigns observed in late July 2026 that attempted to deliver the Cruciferra loader. The campaign combined ClickFix social engineering, the ErrTraffic delivery service and Cruciferra, which included features for terminating antivirus and EDR processes.

← Back to intelligence

ClickFix scam helps spread Cruciferra malware

eSentire’s Threat Response Unit described ErrTraffic-generated ClickFix campaigns observed in late July 2026 that attempted to deliver the Cruciferra loader. The campaign combined ClickFix social engineering, the ErrTraffic delivery service and Cruciferra, which included features for terminating antivirus and EDR processes.