THREATNOIR
Subscribe
Back to Feed
MalwareJun 16, 2026

'Lorem Ipsum' Malware Pivots to ClickFix Delivery

Lorem Ipsum malware campaign now uses compromised WordPress sites to deliver ClickFix.

Read at source
Vendor Watch

Run WordPress?

Get an email when a reviewed story names WordPress, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works

Summary

The 'Lorem Ipsum' malware campaign has evolved its tactics, now utilizing compromised WordPress websites as a distribution vector for its ClickFix payload. Recent analysis suggests a potential connection between this campaign and the notorious ransomware and data extortion group, Vice Society.

Entities

Vice Society (threat_actor)WordPress (product)