Researchers warn of increased malware delivery via fake browser updates

ClearFake, a malware delivery tool that leverages compromised WordPress sites to distribute fake browser updates, is suspected to be operated by the same team behind the SocGholish campaign. ClearFake was named by researcher Randy McEoin, who discovered the JavaScript-based threat in 2023. Users are tricked into updating their Chrome, Edge, or Firefox browsers and inadvertently download malicious software.