New DriveSurge Threat Actor Uses ClickFix and Fake Updates to Infect Website Visitors

A newly identified threat actor named DriveSurge has been quietly compromising thousands of legitimate websites to push malware onto unsuspecting visitors. Using a combination of fake browser update pages and a social engineering trick known as ClickFix, this operation ran largely undetected until now. What makes DriveSurge especially...

Read the full article at the source.