A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and FakeUpdates techniques on compromised sites. [...]
Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks
Summary + source link. No paywalls, no tracking.