CyberSIXT Search
Research reports

BlueVoyant

Lorem Ipsum Revisited: ClickFix Pivot & Rapid Brigantine

By Thomas Elkins and Joshua Green

Excerpt

A ClickFix Pivot & Its Rapid Brigantine Lineage

June 16, 2026 | 21 min read

What Happened?

BlueVoyant Security Operations Center (SOC) and Threat Fusion Cell (TFC) researchers have been tracking an active ClickFix campaign that manipulates users into believing their web browser requires a security update. If the user complies, the ClickFix lure initiates a multi-stage infection chain that ultimately deploys the Lorem Ipsum Loader, a malware family BlueVoyant first documented in May 2026. The current campaign represents a notable evolution from the previous Lorem Ipsum operation, which dis…

The opening of the report, shown for reference. The full report, with its figures and indicators, is published by BlueVoyant on bluevoyant.com.

Mentioned in the excerpt

More from BlueVoyant1

On the same topics

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device