← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Meet DriveSurge: A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites - Silent Push
WHITE CyberHunter_NL 2026-06-01 Modified: 2026-06-01
46
IOCs
MEDIUM VOLUME
drivesurgescreenshotweb searchclickfixinjectmozilla firefoxfingerprintpatternwhoispivotvirustotalfakeupdatespathterminaldefensefebruaryaprilztdspayloadlogic
Indicators of Compromise (2 / 46 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 IPv4 URL domain email hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 0ca424475803a1cb54908a81a00bd93f — 2026-06-01
FileHash-MD5 f3926add1a4531ff324a6acb57d40769 MD5 of 7aa15de93cf85729ddf970e8d7897f69ece3ca29608f73e784a9ba40c9cea18d 2026-06-01
References (1)
↗ https://www.silentpush.com/blog/drivesurge/?utm_source=rss&utm_medium=rss&utm_campaign=drivesurge