🎯 Threat Intelligence

KongTuke's ClickFix Won't Die: modeloRAT Ravages WordPress Sites

500+ hacked WordPress sites. That's the grim tally from MDR scans, all pumping KongTuke's ClickFix straight into users' browsers. Old malware habits die hard.

theAIcatchup Apr 08, 2026 4 min read
Compromised WordPress site displaying fake CAPTCHA lure for KongTuke modeloRAT delivery

⚡ Key Takeaways

  • KongTuke persists with ClickFix on 500+ compromised WordPress sites, delivering modeloRAT via fake CAPTCHAs. 𝕏
  • ClickFix runs alongside newer CrashFix, proving old tricks scale better for mass infections. 𝕏
  • WordPress admins: Audit plugins, enable WAF, or risk becoming malware distributors. 𝕏
Published by

theAIcatchup

Threat intelligence. Zero noise.

#ClickFix #KongTuke #WordPress malware #modeloRAT

Worth sharing?

Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.

Originally reported by Trend Micro Research

Related Stories

📬

Stay in the loop

The week's most important stories from theAIcatchup, delivered once a week.

No spam. Unsubscribe any time.