{
  "id": 10703560,
  "title": "5,400 hacked websites are tricking visitors into installing malware",
  "url": "https://urgent.news/2026/09/29/5-400-hacked-websites-are-tricking-visitors-into-installing-malware",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-29T13:05:19.000Z",
  "source": {
    "name": "Gulf News",
    "slug": "gulf-news",
    "url": "https://gulfnews.com/technology/5400-hacked-websites-are-tricking-visitors-into-installing-malware-1.500692239"
  },
  "original_language": "en",
  "account": "A large-scale cyber attack has compromised over 5,400 websites, using a technique called ClickFix to deceive visitors into installing malware on their computers. These attacks exploit seemingly legitimate instructions, which actually execute malicious commands. Cybercriminals compromise legitimate websites and inject malicious code that redirects certain visitors to fake error messages or verification screens. Instead of directly exploiting software vulnerabilities, ClickFix attacks try to trick users into performing a critical step, such as copying and pasting a command or opening a system utility. Researchers have identified more than 5,400 compromised websites involved in the campaign, many belonging to legitimate small businesses and organizations whose sites have been hacked. The attackers are also using blockchain-based infrastructure to help deliver malicious payloads, making it harder to disrupt the attack. Users should be suspicious if a webpage unexpectedly asks them to press keyboard shortcuts, open Windows Run, PowerShell or Command Prompt, paste copied commands, disable security software, or download unexpected files. If such instructions appear, users should close the webpage instead of following them. The ultimate goal of the campaign is to infect victims' devices with malware.",
  "summary": "More than 5,400 hacked websites are being used in a large-scale campaign designed to trick visitors into installing malware on their own computers. The attacks use a technique known as 'ClickFix', which relies on convincing people to follow seemingly legitimate instructions that actually execute malicious commands. Get updated faster and for FREE: Download the Gulf News app now - simply click…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}