ClickFix Campaign Compromises Ukrainian Websites to Distribute Psychedelic Information Stealer

An active ClickFix campaign has compromised legitimate Ukrainian business websites to inject fake Cloudflare verification pages that distribute a previously undocumented information stealer called Psychedelic. When visitors interact with the malicious page, the lure copies a Windows Installer command to the clipboard and instructs the visitor to paste it into their system. The attack leverages social engineering through fake security verification prompts to trick users into executing malicious commands that deploy the Psychedelic stealer malware.