ClearFake
ClearFake is a malicious JavaScript framework used on compromised websites to spread malware via the drive-by download technique, tricking users into running fake web browser updates and installing malware.
ClearFake is a new malicious JavaScript framework used on compromised websites to spread malware with a drive-by download technique.
Specifically, its operators exploits social engineering to trick the user into running a fake web browser update and installing malware.
Its name “ClearFake” refers to the JavaScript code injected in clear text into websites compromised by its operators.
Our CTI analysts and researchers have carried out a technical analysis on this new malicious JavaScript framework on our blog. In this article, you'll learn about the steps to install ClearFake, the malware installed on the victim's premises, its C2 infrastructure, and tracking opportunities.
If you would also like to discover how we enable users of our XDR platform to anticipate the presence of IT threats before impact, you can watch this interactive demo:
