Macfinger ClickFix campaign, (Tue, Sep 22nd)

SANS Internet Storm Center entries from September 17–23, 2026 cover multiple security topics, including the Macfinger ClickFix phishing campaign, LausivLoader malware delivery and staged data transfer, and TerminalFix activity using PNG steganography and reverse tunneling. The feed also includes HTTP QUERY method analysis and routine Stormcast episodes. The malware and phishing reports indicate active social-engineering and multistage intrusion techniques, but the supplied metadata contains no specific indicators or confirmed CVE references.