Attackers Use Hacked Ukrainian Sites to Spread Psychedelic Stealer

Cybersecurity26 days ago

Arctic Wolf identified a cyberattack campaign utilizing deceptive 'ClickFix' lures to distribute an information stealer to unsuspecting users. Threat actors compromise Ukrainian websites to display fraudulent Cloudflare CAPTCHAs that prompt visitors to copy and run an msiexec command, which installs the 'Psychedelic Stealer' malware on the victim's system.

The malware is designed to exfiltrate sensitive user data, specifically targeting stored passwords, authentication tokens, and cryptocurrency wallet information. This infection chain leverages compromised domains to bypass security warnings and relies on social engineering to trick users into executing system-level commands.

Mapped to your portfolio

Possible scenarios

45%Contained Crimeware Campaign-0.1%
25%Broader European Spread-0.2%
18%War-Cyber Attribution Dispute-0.1%

Each figure is the modeled move of the S&P 500 if the outcome occurs. For information only. Not investment advice.

Looking for more context or analysis?

Tilt chat provides reliable, tailored insights, alerts, and automations.

Attackers Use Hacked Ukrainian Sites to Spread Psychedelic Stealer

In this story

Arctic Wolf Networks Ukraine Cloudflare

Portfolio

SPY
State Street SPDR S&P 500 ETF Trust
100%

Portfolio

SPY
State Street SPDR S&P 500 ETF Trust
100%

Mapped to your portfolio

Possible scenarios

45%Contained Crimeware Campaign-0.1%
25%Broader European Spread-0.2%
18%War-Cyber Attribution Dispute-0.1%

Each figure is the modeled move of the S&P 500 if the outcome occurs. For information only. Not investment advice.