Steam forum ClickFix attacks infect gamers with XMRig cryptominers

Multiple active threats and breaches were reported: Steam discussion forums are being abused by ClickFix lures that deliver XMRig cryptominers; a large malvertising campaign uses fake Solana/Luno/TradingView pages and malicious JavaScript to assemble malware in browser memory; ShinyHunters data leaks are being reused for $2,000 sextortion emails; OnTrac and Origin Energy disclosed customer data exposures after network compromises; the Clop ransomware group is targeting Internet‑exposed PTC Windchill and FlexPLM instances for data theft and extortion; threat actors are hijacking hotel/conferer­