ScanMalware.com
Known malicious kitcriticalstealer

Macfinger ClickFix — shared loader t.4b1009ff6c3f.js (content match)

family: macfinger-clickfix-2026-09

Byte-identical copies of the Macfinger ClickFix loader script t.4b1009ff6c3f.js, served from every attacker domain in the rotation. The file name is the first twelve hex characters of the file's SHA-256.

Anchors

content sha2564b1009ff6c3f89b4f4cb76714a9a5b7363eed633907342b101efbe99c3a14f95

Provenance

Added: 2026-09-23 13:19
Exact content match only. A rebuilt loader will carry a new file name and hash.
References:

Sightings (61)

HostScanScriptMatchWhen
amber-ridge-bruixsioi.live2d036528…https://amber-ridge-bruixsioi.live/t.4b1009ff6c3f.jsbyte2026-09-30 01:49
ashen-trace-zephyr-draeix.life77c7f38b…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:36
ashen-trace-zephyr-draeix.lifef3742daf…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:36
ashen-trace-zephyr-draeix.life5e5aef27…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:35
ashen-trace-zephyr-draeix.life6a7e15f8…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:33
brisk-forge-willow-caium.lifea7961a3a…https://brisk-forge-willow-caium.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:32
ashen-trace-zephyr-draeix.lifecffe7b24…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:30
ashen-trace-zephyr-draeix.lifeec4fc1b7…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:28
ashen-trace-zephyr-draeix.life8cb96fe2…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:28
ashen-trace-zephyr-draeix.lifeb8847741…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:28
ashen-trace-zephyr-draeix.life09d57c04…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:28
ashen-trace-zephyr-draeix.lifeb11194ac…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:27
ashen-trace-zephyr-draeix.lifef3b35f1c…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:27
velvet-otter-glagceis.life1ee6a8b8…https://velvet-otter-glagceis.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:27
hollow-forge-rook-guiyn.lifeed22b657…https://hollow-forge-rook-guiyn.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:26
ashen-trace-zephyr-draeix.life2070e372…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:25
ashen-trace-zephyr-draeix.life0ca60b62…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:24
ashen-trace-zephyr-draeix.life268b8898…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:24
ashen-trace-zephyr-draeix.life263206d3…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:24
ashen-trace-zephyr-draeix.lifea4a304ea…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:24
ashen-trace-zephyr-draeix.lifeab7200b9…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:23
velvet-otter-glagceis.life1133dc37…https://velvet-otter-glagceis.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:21
ashen-trace-zephyr-draeix.lifed700e7e5…https://ashen-trace-zephyr-draeix.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:21
flaempriarnnois.space8bb233fb…https://flaempriarnnois.space/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
flaempriarnnois.spacec020e9a8…https://flaempriarnnois.space/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
flaempriarnnois.spacee25fcbb6…https://flaempriarnnois.space/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
mesa-seen-dcjcj.live88eea211…https://mesa-seen-dcjcj.live/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
quiet-whirl-rook-stoon.livebcdba16f…https://quiet-whirl-rook-stoon.live/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
ridge-ciosktai.sitee8c7b1b7…https://ridge-ciosktai.site/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
ridge-ciosktai.site2c1a021f…https://ridge-ciosktai.site/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
ridge-ciosktai.site854729a8…https://ridge-ciosktai.site/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
viorsoonlucid.life5d371917…https://viorsoonlucid.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
viorsoonlucid.life918cf92e…https://viorsoonlucid.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
coral-zephyr-koarseara.xyz429a2597…https://coral-zephyr-koarseara.xyz/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
coral-zephyr-koarseara.xyzfc122e8a…https://coral-zephyr-koarseara.xyz/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
rerrioara.live55fb1058…https://rerrioara.live/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
quiet-ridge-slaikdoaen.com1d979d45…https://quiet-ridge-slaikdoaen.com/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
quiet-ridge-slaikdoaen.com5cef15d1…https://quiet-ridge-slaikdoaen.com/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
kiln-skioi-c29up.comef5155a4…https://kiln-skioi-c29up.com/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
gaezskoynbrisk.comc7a2e1ba…https://gaezskoynbrisk.com/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
gaezskoynbrisk.comc7487216…https://gaezskoynbrisk.com/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
coral-weave-wren-veis.com8dd25257…https://coral-weave-wren-veis.com/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
mesa-braior-k3w3b.life68814cb7…https://mesa-braior-k3w3b.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
mesa-braior-k3w3b.life9d105866…https://mesa-braior-k3w3b.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
cabskaiyn-crane.life95c2e99a…https://cabskaiyn-crane.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
mesa-braior-k3w3b.life6ffc1da8…https://mesa-braior-k3w3b.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
skaedbraearaquiet.life01a9e484…https://skaedbraearaquiet.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
skaedbraearaquiet.life162a3322…https://skaedbraearaquiet.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
gonfuirkgroao.life9db6b97b…https://gonfuirkgroao.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
gonfuirkgroao.life9cc1d57e…https://gonfuirkgroao.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
brisk-forge-willow-caium.lifedf2e120b…https://brisk-forge-willow-caium.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
brisk-forge-willow-caium.life455ea5ef…https://brisk-forge-willow-caium.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
brisk-forge-willow-caium.life093e9984…https://brisk-forge-willow-caium.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
brisk-forge-willow-caium.lifec7314afc…https://brisk-forge-willow-caium.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
krestmoais-reed.life379a4850…https://krestmoais-reed.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
brisk-forge-willow-caium.life399275d6…https://brisk-forge-willow-caium.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
krestmoais-reed.life7a4aadbf…https://krestmoais-reed.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
velvet-otter-glagceis.life56d3c517…https://velvet-otter-glagceis.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
velvet-otter-glagceis.lifeb261c3fc…https://velvet-otter-glagceis.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
velvet-otter-glagceis.lifec57cb5b9…https://velvet-otter-glagceis.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19
velvet-otter-glagceis.lifea4d1d61d…https://velvet-otter-glagceis.life/t.4b1009ff6c3f.jsbyte2026-09-23 13:19