Steam forum ClickFix attacks infect gamers with XMRig cryptominers

A collection of security incidents reported by BleepingComputer (24–25 Jul 2026): Steam forums are being abused in “ClickFix” posts that install XMRig cryptominers; a large malvertising campaign uses fake crypto/trading sites and JavaScript to assemble malware in browser memory; sextortion scams leverage email lists leaked by ShinyHunters; multiple data breaches and credential attacks (OnTrac, Origin Energy, Chick‑fil‑A credential stuffing) expose PII and account credentials; hotel/conference Wi‑Fi DNS hijacks are stealing Microsoft 365 credentials via phishing sites; Clop ransomware is now ex