ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures

Cybersecurity experts have identified new ClickFix campaigns spreading three different malware loaders, BabaDeda Loader, Lorem Ipsum Loader, and Potemkin, through deceptive update lures. These campaigns pose a significant threat to education and financial sectors, as observed in April 2026. The emergence of these loaders underscores the evolving tactics of cybercriminals who are increasingly sophisticated in delivering malware, making it crucial for organizations to enhance their cybersecurity measures. This development highlights the need for proactive defense strategies to protect against such advanced threats.