[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEzlBUm2-Gg7NA2txYAQXpW9wHFgxbMxtCQbF1Z9vwY0":3},{"article":4,"iocs":44},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":24,"category":25,"article_tags":28},"f3c7997e-f60b-49e1-9f7d-027e330a7bd2","#ClickFix style campaign operated eight bulk registered 588gj*[.]shop lure domains impersonating...","clickfix-style-campaign-operated-eight-bulk-registered-588gj-shop-lure-domains-i-bc4a97","#ClickFix style campaign operated eight bulk registered 588gj*[.]shop lure domains impersonating AI software “PureClaw.” Injected payload is staged with rotating final-stage payloads including a backdoor, AI-gateway implant and ransomware dropper. Details: https:\u002F\u002Ft.co\u002FHCyAAidfxJ https:\u002F\u002Ft.co\u002FVILVCf7nPT","A threat campaign leveraging the ClickFix attack pattern has registered approximately 588 malicious domains mimicking legitimate AI software 'PureClaw' to distribute multi-stage payloads. The injected malware includes backdoors, AI-gateway implants, and ransomware droppers delivered through rotating final-stage payloads. This represents a sophisticated supply-chain-adjacent attack targeting users seeking AI tools.","ClickFix-style campaign uses 588 bulk-registered domains impersonating PureClaw AI software to deliver backdoors and",null,"https:\u002F\u002Fx.com\u002FUnit42_Intel\u002Fstatus\u002F2049994251857952828","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHHMK30WXcAAXJQn.jpg","2026-04-30T23:28:11+00:00","2026-05-01T00:00:11.169834+00:00",8,[18,21],{"name":19,"type":20},"ClickFix","campaign",{"name":22,"type":23},"AI software","technology","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":24,"icon":11,"name":26,"slug":27},"Malware","malware",[29,34,39],{"category":30},{"id":31,"icon":11,"name":32,"slug":33},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":35},{"id":36,"icon":11,"name":37,"slug":38},"7d8b5ab8-ea0b-4ced-ae97-ec251b86993a","Ransomware","ransomware",{"category":40},{"id":41,"icon":11,"name":42,"slug":43},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[45],{"type":27,"value":46,"context":47},"PureClaw (spoofed)","Impersonated AI software used as social engineering lure"]