Exvicy ClickFix Malware-as-a-Service Copies ErrTraffic to Hijack WordPress Sites
New Exvicy MaaS uses compromised WordPress sites to deliver ClickFix lures mimicking Cloudflare Turnstile, assessed as a copycat of ErrTraffic.
45
Malware
ErrTraffic
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenAug 19, 2026
- Last mentionedSep 23, 2026
Timeline
3 articles · newest firstNew Exvicy ClickFix Framework Built on Rival ErrTraffic's Code
Sekoia says the Exvicy ClickFix malware service reuses ErrTraffic code and delivers payloads via WordPress.
64
MaaS Campaign Combines ClickFix, ErrTraffic and Cruciferra
eSentire uncovered a malware-as-a-service campaign pairing ClickFix social-engineering lures with the ErrTraffic and Cruciferra malware families.
35
Appears with
- Sekoiaorganization · 2
- WordPressproduct · 2
- Exvicymalware · 2
- Exvicythreat actor · 1
- ClickFixmalware · 1
- eSentirevendor · 1
- Cloudflare Turnstileproduct · 1
- Cruciferramalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.