Threats Tagged 'native-messaging bridge'
View all threats tagged with 'native-messaging bridge'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'native-messaging bridge'
Click on any threat for detailed analysis and mitigation recommendations
Between September 9 and 14, 2026, a Russian-speaking threat actor compromised at least six legitimate Ukrainian small-business websites to deliver a fake Cloudflare verification page. This social engineering campaign, known as the ClickFix chain, tricked victims into manually executing msiexec.exe commands, resulting in 79 infections from 426 clicks. The malware, named Psychedelic, steals browser credentials, session tokens, and cryptocurrency wallet data from multiple wallets including MetaMask and Trust Wallet. It establishes persistence via browser extensions with native-messaging bridges, scheduled tasks, and communicates with a REST API for additional commands. The attack deliberately avoids encoded PowerShell and uses signed Microsoft binaries to evade detection. The targeting is focused on Ukraine with clear financial motives. Join the discussion | AlienVault OTX General | 10/02/2026, 13:48:42 UTC Added: 10/05/2026, 09:03:32 UTC |
Showing 1 to 1 of 1 result