Steam forum ClickFix attacks infect gamers with XMRig cryptominers

Multiple active threats and incidents reported across consumer and enterprise environments: Steam forums are being abused in “ClickFix” lures that drop XMRig cryptominers; a large malvertising campaign uses malicious JavaScript to assemble fileless malware in browser memory; ShinyHunters breach data is being repurposed for $2,000 sextortion scams; and credential-stuffing and network intrusions have exposed customers at Chick‑fil‑A, OnTrac, and Origin Energy. Threat actors are automating post‑exploit activity with open-source AI agents (Hermes) and deploying AI-enabled tooling (Dolphin X RAT)to