Cybersecurity researchers have identified multiple ClickFix campaigns deploying three new malware loaders: BabaDeda Loader, Lorem Ipsum Loader, and Potemkin. These campaigns use…
Lorem Ipsum Loader is a nascent loader and backdoor active since February 2026. It is delivered through ClickFix lures on compromised WordPress…
Vanilla Tempest, also known as Rapid Brigantine, Vice Society, and Vice Spider, is a financially motivated threat actor known for deploying ransomware…
BlueVoyant is a cybersecurity company that analyzed the Lorem Ipsum Loader campaign, noting the use of compromised WordPress sites and ClickFix lures.…
Rhysida is a ransomware family deployed by Vanilla Tempest (Rapid Brigantine) after initial access via Lorem Ipsum Loader. It is the primary…