WordlistLoader is a malware family distributed through ClearFake campaigns using ClickFix lures. It is delivered via WebDAV servers and is often associated with Amatera Stealer. The malware is part of a threat cluster that compromises legitimate websites to plant fake CAPTCHA lures.