tech ⚠️ MaaS combo weaponizing WordPress for malware drops
A new Malware-as-a-Service (MaaS) campaign merged ClickFix, ErrTraffic, and Cruciferra components to spread malware. This threat was observed in late July 2026, targeting users via compromised WordPress sites. The attack involved a fake security lure that tricked victims into running a malicious PowerShell command. Cruciferra then used a vulnerable driver to kill endpoint security processes, injecting the Remus stealer. Operators are leveraging these combined services to bypass defenses without building tools themselves.