Malwarebytes warns of ClickFix lures amid PHP, Brotli and certificate issues
Original title: The web’s having a rough week. Here’s how to browse safely
The piece says attackers exploited two unnamed PHP flaws and that browsers have blocked eight bad certificates.
Malwarebytes published consumer advice after a cluster of web-security problems in the same week. Researchers have seen criminals compromise legitimate sites, including WordPress, and show fake verification pages that push visitors to install malware or run commands, a pattern it calls ClickFix. It also says attackers were exploiting two PHP flaws, researchers disclosed a critical flaw in Brotli software used by Node.js, and eight compromised certificates raised verification concerns. Most browsers have blocked those certificates; other software may still need updates.
Unconfirmed: The article does not name the PHP flaws, the Brotli CVE, or which certificates were compromised.
- PHP is used by about 7 in 10 sites with a known language, per the article.
- Node.js is on 7.4% of sites with an identified web-server technology, citing W3Techs.
- ClickFix prompts have appeared on hacked legitimate WordPress sites, not only lookalikes.
- A normal page should not ask visitors to open PowerShell or “repair” a computer.
Impact: Visitors tricked into installing malware or running commands
| Product | Affected |
|---|---|
| PHP | — |
| Brotli (used by Node.js) | — |
- 1.Do not run unexpected commands or install software from a site prompt.
- 2.Check browser updates in the browser’s own settings, not a page popup.
- 3.Keep the operating system, browser and applications updated automatically.
- Organizations
- W3Techs
From the original article
3 min read at malwarebytes.comPHP and Node. js flaws, hacked sites, fake updates, and rogue certificates can put you at risk even on trusted websites. Here’s how to stay safe.
By @MetallicaMVP · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.