And the Winner in Dominant Malware Delivery? ClickFix

DarkReading roundup highlights rising attack trends and high-impact incidents: social-engineering technique “ClickFix” is now the dominant malware delivery vector; LLM hallucinations enable “phantom squatting” domain abuse against brands; a China-linked group compromised multiple Southeast Asian critical systems and deployed a new backdoor; large-scale credential-theft campaigns continue (FortiBleed targeting FortiGate, cloud credential theft via an Amazon Q extension flaw); attackers are weaponizing exposed AI endpoints and fake bug reports to hijack AI coding agents; supply-chain and devops/