Tag: drive-by attacks

1 Attack Reports | 0 Vulnerabilities

Attack reports

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

A sophisticated threat actor named DriveSurge operates as an Initial Access Broker using a Pay-Per-Install model to deliver malware at scale. The actor compromises thousands of legitimate websites and uses zTDS (Traffic Distribution System) to silently redirect visitors to malicious content. Victim…

initial access broker

bulletproof hosting

drive-by attacks

macos targeting

browser impersonation

Published: June 1, 2026

Downloadable IOCs: 11

Click here to see more Attack Reports