WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords

The Hacker News 24 August 2026, 15:35 EEST Security

Cybersecurity researchers have flagged two new malware families called WordlistLoader and SynkLoader that's used to deliver next-stage payloads and likely sell access to ransomware groups. According to findings from Gen Digital, WordlistLoader is being used to deliver Amatera Stealer (aka ACR Stealer or AcridRain Stealer) via ClearFake campaigns, which employ the ClickFix (aka FakeCaptcha)

Read the full story on The Hacker News https://thehackernews.com/2026/08/wordlistloader-delivers-amatera-via.html

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

ReliaQuest confirms failed data-theft attack after ShinyHunters breach BleepingComputer
South Korean startup platform breach exposes key management failures BleepingComputer
Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt The Hacker News
Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account The Hacker News