PhishingReviewed
Fake verification page at browser-architecture-sync.com pushes ClickFix PowerShell malware
Threat researcher @Malwarehunterr posted on X on 11 November 2026 about a 'ClickFix' lure at hxxps://browser-architecture-sync[.]com/?step=verify, a fake verification page that tricks visitors into running a PowerShel…
- browser-architecture-sync.com
- Payload host remote-helpdesk.com (sc.ps1); rigercloud-network.com
Reported Nov 11, 20261 report