MEDIUMVulnerability
Global

Steam forum ClickFix attacks infect gamers with XMRig cryptominers

·Source: BleepingComputer

Updated:

Executive Summary

Steam discussion forums are being abused in ClickFix attacks that pretend to be fixes for game and computer problems but actually infect devices with cryptominers. [...]

Analysis

Steam discussion forums are being abused in ClickFix attacks that pretend to be fixes for game and computer problems but actually infect devices with cryptominers. [...]
Source Attribution

Originally published by BleepingComputer on Jul 25, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Zimbabwe regulator approves seven fintechs for sandbox

The Securities and Exchange Commission of Zimbabwe has given the green light to a number of fintechs seeking to participate in its regulatory sandbox.

Finextra
MEDIUMVulnerabilityNEW

New CREST AI Standards to Deliver AI-Enabled Pentesting Accreditation

CREST’s new AI standards are optional add-on requirements for cybersecurity service providers wishing to demonstrate responsible AI usage

Infosecurity Magazine
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-15014 — The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart ...

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 3.9.7 via the `billing_phone` parameter. This is due to the `processRegistration()` function using a phone-unbound `$_SESSION['sa_mobile_verified']` boolean flag as the sole gate before

CVE-2026-15014
NIST NVD