Australian Cyber Security Centre Issues Alert Over ClickFix Attacks

Multiple active campaigns and high-risk trends reported: ACSC warns of a ClickFix-based campaign delivering the Vidar infostealer; CloudZ RAT with a Pheno plugin abuses Microsoft Phone Link to intercept SMS OTPs; a fake Claude site delivers DonutLoader and a new Beagle backdoor via DLL sideloading; a trojanized Daemon Tools installer affected thousands; Venomous#Helper is deploying signed RMM via SSA‑themed phishing; Microsoft reports a mass phishing campaign using fake compliance emails targeting ~35,000 users; researchers note increased abuse of platforms like Vercel for phishing. Separately