New DOUBLECUP ClickFix service hides malware in browser cache images

BleepingComputer by Lawrence Abrams 3 August 2026, 23:01 EEST Systems Security

A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by victims' browsers, ultimately delivering CountLoader to Windows and macOS devices and a new remote access trojan named DeviceManager to Windows systems.

Read the full story on BleepingComputer https://www.bleepingcomputer.com/news/security/new-doublecup-clickfix-service-hides-malware-in-browser-cache-images/

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

Hospital operator Nutex Health says data stolen in cyberattack BleepingComputer
A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw The Hacker News
Microsoft PowerToys adds Alt+Tab-style switching for an app's windows BleepingComputer
WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android The Hacker News