Exvicy ClickFix Malware-as-a-Service Copies ErrTraffic to Hijack WordPress Sites
New Exvicy MaaS uses compromised WordPress sites to deliver ClickFix lures mimicking Cloudflare Turnstile, assessed as a copycat of ErrTraffic.
A new Malware-as-a-Service (MaaS) platform named Exvicy is using compromised WordPress sites to deliver ClickFix lures. The lures mimic Cloudflare Turnstile verification pages to hijack users. Sekoia researchers assess with high confidence that Exvicy is a copycat of the ErrTraffic framework, reusing its JavaScript injection and C2 routines.
45